← All advisories

Medium severity6.1NVD Advisory· Published Sep 23, 2022· Updated Jun 17, 2026

CVE-2022-40359

CVE-2022-40359

Description

Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Kfm Project/Kfm
cpe:2.3:a:kfm_project:kfm:*:*:*:*:*:*:*:*
Range: <=1.4.7
kfm/kfmcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.4.7

Patches

Vulnerability mechanics

References

2

cxsecurity.com/issue/WLB-2022090057nvdExploitThird Party Advisory
code.google.com/archive/p/kfm/downloadsnvdProduct

News mentions

0

No linked articles in our index yet.