Security Advisory

CVE-2022-45049

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-04 18:11:23
Last updated 2025-04-10 18:05:15
Assigner DIVD
State PUBLISHED

Description

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victims browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.