CVE-2022-38771: Transtek Mojodat Fixed Asset Management

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.

Affected products

• Transtek Mojodat Fixed Asset Management: version 2.4.6 only

Published 2022-09-13. Last modified 2026-06-17.