CVE-2022-36530: Rageframe

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the info.php page.

Affected products

• Rageframe Rageframe: version 2.6.37 only

Published 2022-08-16. Last modified 2026-07-09.