← All advisories

Critical severity9.8NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2016-9022

CVE-2016-9022

Description

Exponent CMS before 2.6.0 has improper input validation in usersController.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Exponent/Exponent CMS2 versions
cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*range: <2.6.0
- (no CPE)range: <2.6.0
Exponent CMS/Exponent CMSdescription

Patches

Vulnerability mechanics

References

2

exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31nvdPatchVendor Advisory
github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.