CVE-2022-23321

MediumCVSS 4.8

Published: 10/02/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

44th percentile - higher than 44% of all known CVEs

Summary

A persistent cross-site scripting (XSS) vulnerability was discovered in the XMPie UStore application version 12.3.7244.0 in the administrative panel when editing users. The vulnerability exists in two input fields, allowing injection of malicious scripts.

Risk Assessment

An attacker could exploit this vulnerability to hijack administrator sessions, steal sensitive data, or spread malware within the organization.

Recommendation

Immediately update the XMPie UStore application to the latest available version and implement input filtering and validation in the administrative panel.

Original NVD description (English source)

A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.