CVE-2022-26573

    Dashboard / Vulnerabilities / CVE-2022-26573

    CVE-2022-26573

    Published: 25 Mar 2022Last Modified: 12 Aug 2026

    Summary:

    Details: Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26573.json, https://nvd.nist.gov/vuln/detail/CVE-2022-26573, https://github.com/magicblack/maccms10/issues/840, https://github.com/magicblack/maccms10/commit/026a2893d7de4ba4987b670b292ba569f3b8d296#diff-498970d2c74a54ff851bf844ce006053b7bb7042b19711a81966554f62aff753L41-R47

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -026a2893d7de4ba4987b670b292ba569f3b8d296

    Affected versions

    v2022.1000.3029
    v2022.1000.3028
    v2022.1000.3027
    v2022.1000.3026
    v2022.1000.3025
    v2022.1000.3005
    v2022.1000.3004
    v2022.1000.3002
    v2022.1000.3001
    v2022.1000.1099

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-26573 | CVE-DB