Medium severity4.8NVD Advisory· Published Apr 8, 2022· Updated Jun 17, 2026
CVE-2022-27062
CVE-2022-27062
Description
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
- AeroCMS/AeroCMSdescription
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- drive.google.com/file/d/1kMGPBLKgefvKZj34QxDlPTxXdcT0kRR_/viewnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.