medium4.8
CVE-2022-33009
A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF fil…
Impact
A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightcms Project | Lightcms | Version 1.3.11 |