CVE-2022-27503

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
CitrixStoreFront>= 1912, < CU5; >= 3.12, < CU9

References

Timeline

Published
Apr 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275056.1Reflected cross site scripting (XSS)CVE-2022-275062.7Hard-coded credentials allow administrators to access the shell via the SD-WAN CLICVE-2022-275076.5Authenticated denial of serviceCVE-2022-275087.5Unauthenticated denial of serviceCVE-2022-275096.1Unauthenticated redirection to a malicious websiteCVE-2022-27519.8A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionaCVE-2022-275109.8Unauthorized access to Gateway user capabilitiesCVE-2022-275118.1Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the neCVE-2022-275125.3Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix CVE-2022-275139.6Remote desktop takeover via phishingCVE-2022-275169.8User login brute force protection functionality bypassCVE-2022-275189.8Unauthenticated remote arbitrary code execution
CVE-2022-27503: Medium severity, CVSS 6.1 | Vulnix