High severity7.3NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026
CVE-2022-47561
CVE-2022-47561
Description
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-productsnvdThird Party Advisory
News mentions
0No linked articles in our index yet.