CVE-2022-43711: Gxsoftware Xperiencentral

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.

Affected products

• Gxsoftware Xperiencentral: from 10.29.1, up to and including 10.33.0

Published 2023-07-26. Last modified 2026-06-17.