← Back to browse · API

CVE-2022-46889

Severity
MEDIUM
CVSS
5.4
EPSS
0.60115
Risk score
42.64
CISA KEV
No
PoC
No
Published
2023-01-19
Modified
2025-04-03
First seen
2026-08-07
Aliases
EUVD-2022-49669, GHSA-C89F-G4W2-93VV
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-49669

Description

A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the title parameter used in /subtitles.php.

References