Vulnerability CVE-2022-39054


Published: 2022-09-28

Description:
Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

 References:
https://www.twcert.org.tw/tw/cp-132-6524-74530-1.html

Copyright 2026, cxsecurity.com

 

Back to Top