Skip to content
OpenAdvisories
Unscored CVE-2022-23903 EUVD-2022-28825GHSA-6gj7-p95m-cwrq

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary f…

Published Mar 29, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.

References