{"affected":[],"cveId":"CVE-2022-26962","cwes":["CWE-79"],"description":"Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.4,"severity":"medium","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794312600177,"publishedAt":1789075026517,"references":[{"source":"cve@mitre.org","tags":[],"url":"https://www.gruppotim.it/it/footer/red-team/2022/CVE-2022-26962-Italtel-NFV.html"}],"remediation":[],"revision":"2b7db424b3fed6303b83bb9eefeac4b5a28f3a31c94e1136d1b2cb6d029f0692","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313101438,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26962"}],"ssvc":{"assessedAt":1789412350628,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2022-26962","updatedAt":1794313101438}