VYPR
← All advisories
Low severity3.5NVD Advisory· Published Dec 9, 2022· Updated Jun 17, 2026

CVE-2022-4377

CVE-2022-4377

Description

A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215197 was assigned to this vulnerability.

Affected products

3
  • unspecified/S-CMSv5
    Range: 5.0 Build 20220328
  • S CMS/S CMS2 versions
    cpe:2.3:a:s-cms:s-cms:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:s-cms:s-cms:5.0:*:*:*:*:*:*:*
    • (no CPE)range: 5.0 Build 20220328

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.