Headline
CVE-2022-23896: Cross-site Scripting (XSS) - Stored in admidio
Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).
Valid
Reported on
Jan 11th 2022
Description
Stored xss
Proof of Concept
onmouseover="alert(1)">link</a>
Video : https://drive.google.com/file/d/1WzArNdgXgjVOS6qsePRvGWIz6ljtxApx/view?usp=sharing
Impact
Through this vulnerability, an attacker is capable to execute malicious scripts.