Description
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Service.template.cls endpoint does not properly neutralise user input, resulting in the vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Axiell | Iguana | < 4.5.02 | — |
References
- https://csirt.divd.nl/CVE-2022-45051/ third-party-advisory
- https://csirt.divd.nl/DIVD-2022-00064/ third-party-advisory