CVE-2022-25489

MEDIUMNuclei

Atom CMS v2.0 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-25489 has a selected CVSS score of 5.4 (medium); EIP currently links 1 Nuclei template.

Description

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMAtom CMS v2.0 - Cross-Site ScriptingCVSS 5.4

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement.

Remediation

Fixed in version Atom CMS v2.1

WeaknessesCWE-79
Authorstheamanrawat
Template tagscvecve2022xssatomcmsthedigitalcraftvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:thedigitalcraft:atomcms:2.0:*:*:*:*:*:*:*
https://github.com/thedigicraft/Atom.CMS/issues/258 https://nvd.nist.gov/vuln/detail/CVE-2022-25489 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2