Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-45049 EUVD-2022-47971GHSA-w5fv-6c9w-7f2x

Reflected XSS in Axiell Iguana CMS

Published Jan 4, 2023 · Updated Apr 10, 2025 · Assigned by DIVD

Description

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.

Affected products

VendorProductAffectedFixed
Axiell Iguana < 4.5.02 —

References