Description
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.
Unscored
CVE-2022-43711
EUVD-2022-46693GHSA-68vv-6jg5-67fm
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) b…
Published Jul 26, 2023 · Updated Oct 23, 2024 · Assigned by mitre