← All advisories

Medium severity6.1NVD Advisory· Published Jul 14, 2022· Updated Jun 17, 2026

CVE-2022-34094

CVE-2022-34094

Description

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Portal do Software Publico Brasileiro/i3geodescription
Portal Do Software Publico Brasileiro/i3geollm-create
Range: 7.0.5
Saladesituacao/i3geollm-create
Range: 7.0.5
Edmarmoretti/i3geollm-create
Range: 7.0.5

Patches

Vulnerability mechanics

References

5

github.com/edmarmoretti/i3geo/issues/5nvdExploitThird Party Advisory
github.com/saladesituacao/i3geo/issues/5nvdExploitThird Party Advisory
github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txtnvdExploitThird Party Advisory
owasp.org/www-community/attacks/xss/nvdTechnical DescriptionThird Party Advisory
softwarepublico.gov.br/social/i3geonvdProduct

News mentions

0

No linked articles in our index yet.