CVE-2022-43711
26.07.2023, 14:15
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.
Vendor | Product | Version |
---|---|---|
gxsoftware | xperiencentral | 10.29.1 ≤ 𝑥 ≤ 10.33.0 |
𝑥
= Vulnerable software versions