VYPR
← All advisories
Low severity3.5NVD Advisory· Published Dec 9, 2022· Updated Jun 17, 2026

CVE-2022-4377

CVE-2022-4377

Description

A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215197 was assigned to this vulnerability.

Affected products

3
  • S CMS/S CMSllm-fuzzy2 versions
    5.0 Build 20220328+ 1 more
    • (no CPE)range: 5.0 Build 20220328
    • cpe:2.3:a:s-cms:s-cms:5.0:*:*:*:*:*:*:*
  • unspecified/S-CMSv5
    Range: 5.0 Build 20220328

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.