medium5.4
CVE-2022-39027
U-Office Force Forum function has insufficient filtering for special characters.
Impact
U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edetw | U-Office Force | through 20.50.7821d |