← Database

CVE-2022-25784

CRITICAL CVSS: 9.1 Published: 2022-05-04 Modified: 2026-06-17

Description

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Affected Platforms

Secomea Sitemanager 1129 FirmwareSecomea Sitemanager 3329Secomea Sitemanager 3549 FirmwareSecomea Sitemanager 1139Secomea Sitemanager 1149Secomea Sitemanager 3529 FirmwareSecomea Sitemanager 3349Secomea Sitemanager 3549Secomea Sitemanager 1129Secomea Sitemanager 3339 Firmware

Weakness Type

CWE-79, CWE-79

References