CVE-2022-45049 Information

Description

A reflected XSS vulnerability has been found in Axiell Iguana CMS allowing an attacker to execute code in a victim’s browser. The url parameter on the novelist.php endpoint does not properly neutralise user input resulting in the vulnerability.

Reference

https://csirt.divd.nl/CVE-2022-45049/ A reflected XSS vulnerability has been found in Axiell Iguana CMS allowing an attacker to execute code in a victim’s browser. The url parameter on the novelist.php endpoint does not properly neutralise user input resulting in the vulnerability.