Medium severity5.4NVD Advisory· Published Mar 29, 2022· Updated Jun 17, 2026

CVE-2022-23903

Description

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

pearadmin/pear-admin-thinkdescription
Pearadmin/pear-admin-thinkllm-create
Range: <=5.0.6

Patches

Vulnerability mechanics

References

github.com/pearadmin/pear-admin-think/issues/1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000