CVE-2022-45051: Axiell Iguana

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Service.template.cls endpoint does not properly neutralise user input, resulting in the vulnerability.

Affected products

• Axiell Iguana: from 4.0.0, before 4.5.02 (fixed in 4.5.02)

Published 2023-01-04. Last modified 2026-06-17.