Critical · 9.1 CVE-2022-21145 EUVD-2022-26391GHSA-c8r6-vf82-fj44

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-…

Published Apr 14, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Lansweeper	lansweeper	9.1.20.2	—

References

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442
https://www.lansweeper.com/changelog/