medium6.1
CVE-2022-40359
Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php.
Impact
Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kfm Project | Kfm | through 1.4.7 |