CVE-2022-39025

Publication date

2022-10-31 06:40:37

Family

twcert

State

PUBLISHED

Description

U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.