Medium severity6.1NVD Advisory· Published Sep 28, 2022· Updated Jun 17, 2026

CVE-2022-39053

Description

Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Heimavista/Dark Horse Rpage
cpe:2.3:a:heimavista:dark_horse_rpage:*:*:*:*:*:*:*:*
Range: <5.4.103
Heimavista/Rpagellm-fuzzy
HEIMAVISTA INC./Rpagev5
Range: unspecified

Patches

Vulnerability mechanics

References

www.twcert.org.tw/tw/cp-132-6523-d4c60-1.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000