PT-2022-12238
CVE-2021-44829
·
Published
2022-01-20
·
Updated
2022-02-10
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
AFI WebACMS versions through 2.1.0
Description
A Cross Site Scripting (XSS) issue exists in the index.html file of AFI WebACMS via the
ID parameter. This allows for potential malicious script execution.Recommendations
For versions through 2.1.0, consider restricting access to the index.html file or disabling the
ID parameter to minimize the risk of exploitation until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾