Medium severity6.1NVD Advisory· Published Apr 8, 2022· Updated Jun 17, 2026
CVE-2022-27063
CVE-2022-27063
Description
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
- AeroCMS/AeroCMSdescription
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- drive.google.com/file/d/1GxOyX1JkG0trfdaCLfe06TR6WLIGoUXE/viewnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.