PT-2026-2372 · Testa · Testa

Ashkan Moghaddas · Publicado 2026-01-13 · Atualizado 2026-01-14 · CVE-2022-50896

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Testa version 3.5.1

Description The software contains a reflected cross-site scripting issue in the login.php file. Specifically, the redirect parameter is susceptible to malicious script injection. An attacker can craft a specially encoded payload within this parameter to execute arbitrary JavaScript code in a victim’s browser. The vulnerable API endpoint is /login.php and the vulnerable parameter is redirect.

Recommendations Apply any available updates to address the issue in Testa version 3.5.1.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-50896

Produtos afetados

Testa

Referências · 5

• 🔥 https://exploit-db.com/exploits/51023 · Exploit
• https://twitter.com/CVEnew/status/2011383029923500240 · Publicação no Twitter
• https://web.archive.org/web/20220406031253/https://testa.cc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-50896 · Nota de Segurança
• https://vulncheck.com/advisories/testa-online-test-management-system-reflected-cross-site-scripting-xss · Nota