CVE-2022-23049

Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.

• CWE-79

• https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461Exploit, Issue Tracking, Vendor Advisory
• https://fluidattacks.com/advisories/cobain/Exploit, Issue Tracking, Third Party Advisory
• https://github.com/exponentcms/exponent-cms/issues/1546Exploit, Issue Tracking, Third Party Advisory
• https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461Exploit, Issue Tracking, Vendor Advisory
• https://fluidattacks.com/advisories/cobain/Exploit, Issue Tracking, Third Party Advisory
• https://github.com/exponentcms/exponent-cms/issues/1546Exploit, Issue Tracking, Third Party Advisory

Published

Feb 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23043Zenario CMS 9.2 allows an authenticated admin user to bypass…7.2
• CVE-2022-23044Tiny File Manager version 2.4.8 allows an unauthenticated re…8.8
• CVE-2022-23045PhpIPAM v1.4.4 allows an authenticated admin user to inject …4.8
• CVE-2022-23046PhpIPAM v1.4.4 allows an authenticated admin user to inject …7.2
• CVE-2022-23047Exponent CMS 2.6.0patch2 allows an authenticated admin user …4.8
• CVE-2022-23048Exponent CMS 2.6.0patch2 allows an authenticated admin user …7.2
• CVE-2022-2305The WordPress Popup WordPress plugin through 1.9.3.8 does no…4.8
• CVE-2022-23050ManageEngine AppManager15 (Build No:15510) allows an authent…7.2
• CVE-2022-23051PeteReport Version 0.5 allows an authenticated admin user to…5.4
• CVE-2022-23052PeteReport Version 0.5 contains a Cross Site Request Forgery…6.5
• CVE-2022-23053Openmct versions 1.3.0 to 1.7.7 are vulnerable against store…6.1
• CVE-2022-23054Openmct versions 1.3.0 to 1.7.7 are vulnerable against store…6.1