VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 3, 2022· Updated Jul 9, 2026

CVE-2022-24573

CVE-2022-24573

Description

A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Element It/HTTP Commander4 versions
    cpe:2.3:a:element-it:http_commander:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:element-it:http_commander:*:*:*:*:*:*:*:*range: >=5.0.0,<5.3.6
    • cpe:2.3:a:element-it:http_commander:7.0.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: =7.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.