medium6.1
CVE-2022-24573
A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by…
Impact
A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Element-It | Http Commander | from 5.0.0 before 5.3.6 Version 7.0.0 |