PT-2026-2372 · Testa · Testa

Ashkan Moghaddas · CVE-2022-50896 · Published 2026-01-13 · Updated 2026-01-14

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Testa version 3.5.1

Description The software contains a reflected cross-site scripting issue in the login.php file. Specifically, the redirect parameter is susceptible to malicious script injection. An attacker can craft a specially encoded payload within this parameter to execute arbitrary JavaScript code in a victim’s browser. The vulnerable API endpoint is /login.php and the vulnerable parameter is redirect.

Recommendations Apply any available updates to address the issue in Testa version 3.5.1.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-50896

Affected Products

Testa

References · 5

• 🔥 https://exploit-db.com/exploits/51023 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50896 · Security Note
• https://twitter.com/CVEnew/status/2011383029923500240 · Twitter Post
• https://web.archive.org/web/20220406031253/https://testa.cc · Note
• https://vulncheck.com/advisories/testa-online-test-management-system-reflected-cross-site-scripting-xss · Note