| |
Vulnerability CVE-2022-39026
Published: 2022-10-31
| Description: |
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack. |
References: |
https://www.twcert.org.tw/tw/cp-132-6641-55796-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
