Skip to content
OpenAdvisories

Product · momofoolish

sra-admin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2022-39301

    sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload

    sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting (XSS) vulnerability. After logging into the sra-admin background, an attacker can upload an html page containi…

    momofoolish sra-admin