CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-40289
Severity
CRITICAL
CVSS
9
EPSS
0.60%
Original NVD Description
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.