Skip to main content
Loading…
    CVE-2025-22272 — In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is then executed in the browse — CVE Database · The Intelligence Room