CVE-2022-39027: Edetw U-Office Force

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.

Affected products

• Edetw U-Office Force: up to and including 20.50.7821d

Published 2022-10-31. Last modified 2026-06-17.