Vulnerability — CVE-2022-28703

CVE-2022-28703

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-28703
Description:: A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
Last updated date:: 12/19/2022

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/19/2022
Reference url to background: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1532