CVE-2022-38357 Information

Description

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack via the url parameter of /module/module_frame/index.php.

Reference

https://www.tenable.com/security/research/tra-2022-29 Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack via the url parameter of /module/module_frame/index.php.