CVE-2022-32125

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1

Description A reflective cross-site scripting (XSS) issue was found in 74cmsSE. The issue is related to the /job API endpoint. This allows for potential XSS attacks.

Recommendations For 74cmsSE version 3.5.1, consider restricting access to the /job endpoint until a fix is available. As a temporary workaround, avoid using the vulnerable endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.