312
VMScore

CVE-2022-24612

Published: 25/02/2022 Updated: 04/03/2022
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

eyesofnetwork eyesofnetwork 5.3-11

Exploits

Transposh WordPress Translation versions 107 and below suffer from an incorrect authorization vulnerability When installed, Transposh comes with a set of pre-configured options, one of these is the "Who can translate" setting under the "Settings" tab, which by default allows "Anonymous" users to add translations via the plugin's "tp_translation" ...