Security Advisory
CVE-2022-45049
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victims browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.