← Database

CVE-2022-43711

MEDIUM CVSS: 6.1 Published: 2023-07-26 Modified: 2026-06-17

Description

Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.

Affected Platforms

Gxsoftware Xperiencentral

Weakness Type

CWE-79

References