CVE-2022-31904

MediumCVSS 6.1

Published: 12/07/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

41th percentile - higher than 41% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in the Mediacenter by EGT-Kommunikationstechnik UG before version 2.0, specifically in the Online_Update.php component. It allows injection of malicious scripts into the page.

Risk Assessment

An attacker can exploit this flaw to steal user sessions, redirect to malicious sites, or steal sensitive data.

Recommendation

Immediately update the Mediacenter system to version 2.0 or later, which includes a fix for the XSS vulnerability.

Original NVD description (English source)

EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Online_Update.php.