← Back to CVE List
CVE-2022-39054
Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt