CVE-2022-35118

MediumCVSS 6.1

Published: 01/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

35th percentile - higher than 35% of all known CVEs

PyroCMS version 3.9 was found to contain multiple cross-site scripting (XSS) vulnerabilities.

An attacker can inject malicious JavaScript code, potentially leading to session theft, account takeover, or website defacement.

It is recommended to immediately update PyroCMS to the latest available version and implement input and output sanitization for user data.

Original NVD description (English source)

PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.