We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2022-50940

CVE-2022-50940

PHP

Severity: MEDIUM
CVSS: 6.4CVSS
Published: 2026-02-01
Last modified: 2026-02-03
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CWE: CWE-79

Description

Knap Advanced PHP Login 3.1.3 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious script code in the name parameter. Attackers can exploit the vulnerability to execute arbitrary scripts in users and activity log backend modules, potentially leading to session hijacking and persistent phishing attacks.

References

https://laravel-vuejs.com/
https://www.vulncheck.com/advisories/knap-advanced-php-login-persistent-cross-site-scripting-via-name-parameter
https://www.vulnerability-lab.com/get_content.php?id=2307

Summary

Description

References