« Volver al listado

CVE-2022-26573

Estado: ModificadaMedia (6.1)—

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Maccms — Maccms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-26573",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-03-25T19:15:10.953",
  "references": [
    {
      "url": "https://github.com/magicblack/maccms10/commit/026a2893d7de4ba4987b670b292ba569f3b8d296#diff-498970d2c74a54ff851bf844ce006053b7bb7042b19711a81966554f62aff753L41-R47",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/magicblack/maccms10/issues/840",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/magicblack/maccms10/issues/840",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters."
    },
    {
      "lang": "es",
      "value": "Se ha detectado que Maccms versión v10, contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) reflejado en /admin.php/admin/art/data.html por medio de los parámetros select y input"
    }
  ],
  "lastModified": "2026-06-17T04:35:23.380",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7049FDA-9118-418C-9816-E2627C341D8F"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E3AD4C3-5452-4A33-B426-B0CBF2D56EAD"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FF6ADDF-1480-4A46-938E-C17BD227BEAE"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41E368B4-0B48-418B-923D-8368E3DC2372"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CDE0C52-4110-4A3B-BDF4-09D860C0F96F"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24CB165C-5EF3-4555-8907-80411877364D"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23181A63-9B13-42CF-A557-46CC4170CA35"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72466714-0BC2-4225-9A1D-FCF1698F6B52"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "370FB13E-4AFD-4A8D-A7F3-D9DB76C15FBC"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F7CACDA-7E15-4C09-A872-06DBDD5100B4"
            },
            {
              "criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B355B68-FF2D-4638-9818-E93D5308B6A1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}