CVE-2022-26962

Summary

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.

Affected Software

Weaknesses

• n/a

References

• https://www.gruppotim.it/it/footer/red-team/2022/CVE-2022-26962-Italtel-NFV.html

• ←Previous
• Next→