CVE-2022-4554
B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - iletisim@usom.gov.tr
- Published
- 2023-01-24
- Last modified
- 2026-05-20
- Weaknesses
- CWE-79
Affected products
- B2b Customer Ordering System (Id Software Project And Consultancy Services)
- B2b Dealer Order System (Idyazilim)
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0022
- https://www.usom.gov.tr/bildirim/tr-23-0022
