| |
Vulnerability CVE-2022-37721
Published: 2022-11-25
| Description: |
PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (XSS_ when a low privileged user such as an author, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation. |
References: |
http://pyrocms.com
https://labs.integrity.pt/advisories/cve-2022-37721/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
