CVE-2022-30482

Опубликовано: 02 июн. 2022

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.php via the ctg_name parameters.

Ссылки

https://github.com/APTX-4879/CVE
Third Party Advisory
https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30482.pdf
Exploit
Third Party Advisory
https://github.com/creativesaiful/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar-
Third Party Advisory
https://github.com/APTX-4879/CVE
Third Party Advisory
https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30482.pdf
Exploit
Third Party Advisory
https://github.com/creativesaiful/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar-
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ecommerce-project-with-php-and-mysqli-fruits-bazar_project:ecommerce-project-with-php-and-mysqli-fruits-bazar:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00301

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-h247-67j6-q9pj