CVE-2022-23321: Xerox Xmpie Ustore

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.

Affected products

  • Xerox Xmpie Ustore: version 12.3.7244.0 only

Published 2022-02-10. Last modified 2026-07-09.