medium6.1
CVE-2022-29653
OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.
Impact
OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ofcms Project | Ofcms | Version 1.1.4 |