CVE-2022-3721: 
PHP vulnerability analysis and mitigation

A code injection vulnerability was identified in the GitHub repository froxlor/froxlor versions prior to 0.10.39. The vulnerability was discovered and assigned CVE-2022-3721 on October 27, 2022 (CVE MITRE).

The vulnerability was related to insufficient input validation when adding or editing administrators and customers in the Froxlor system. The issue was specifically found in the validation of name, firstname, company, street, and city fields, which lacked proper regex validation for descriptive text (GitHub Commit).

This vulnerability could potentially allow attackers to inject malicious code through user input fields when adding or editing administrator and customer accounts in the Froxlor system (CVE MITRE).

The issue was fixed in version 0.10.39 of the Froxlor software. The fix implemented proper input validation using REGEX_DESC_TEXT for various user input fields including name, firstname, company, street, and city (GitHub Commit).