CVE-2022-45050: Axiell Iguana

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability.

Affected products

• Axiell Iguana: from 4.0.0, before 4.5.02 (fixed in 4.5.02)

Published 2022-12-01. Last modified 2026-06-17.