VYPR

Force Bulletin

by U Office

CVEs (1)

  • CVE-2022-39024MedOct 31, 2022
    risk 0.40cvss 6.1epss 0.00

    U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.