Low severity3.5NVD Advisory· Published Dec 9, 2022· Updated Jun 17, 2026
CVE-2022-4377
CVE-2022-4377
Description
A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215197 was assigned to this vulnerability.
Affected products
2- unspecified/S-CMSv5Range: 5.0 Build 20220328
Patches
Vulnerability mechanics
References
2- github.com/mengdeyin/main/blob/main/README.mdnvdBroken LinkThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.