Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-46438 EUVD-2022-49243GHSA-7g72-m37j-c82m

A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute…

Published Jan 12, 2023 · Updated Apr 8, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter.

References