CVE-2022-45049: Axiell Iguana

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.

Affected products

• Axiell Iguana: from 4.0.0, before 4.5.02 (fixed in 4.5.02)

Published 2023-01-04. Last modified 2026-06-17.