CVE-2022-27348

MEDIO 4.8CVE-2022-27348 · Published 08/04/2022 · updated 17/06/2026

In breve

CVE-2022-27348 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda social codia sms (socialcodia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
social codia sms socialcodia	`= 1.0`	No fix yet

Description

Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.

References

packetstormsecurity.com/files/166650/Social-Codia-SMS-1-Cross-Site-Scripting.html · Exploit
drive.google.com/file/d/1PLRmIi7EBMAXkLMUhUy09PVph1CW6otF/view · Exploit
D4rkP0w4r/sms-Add_Student-Stored_XSS-POC · Exploit

Altre vulnerabilità di social codia sms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free