VULNERABILITY INTELLIGENCE
CVE-2022-50940
CVSS score6.4 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-02-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Description
Knap Advanced PHP Login 3.1.3 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious script code in the name parameter. Attackers can exploit the vulnerability to execute arbitrary scripts in users and activity log backend modules, potentially leading to session hijacking and persistent phishing attacks.
Weakness classification
- disclosure@vulncheck.com: CWE-79