CVE-2022-45217

Опубликовано: 07 дек. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module.

Ссылки

https://github.com/sudoninja-noob/CVE-2022-45217/blob/main/CVE-2022-45217
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.html
Product
https://github.com/sudoninja-noob/CVE-2022-45217/blob/main/CVE-2022-45217
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.html
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:book_store_management_system_project:book_store_management_system:1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00296

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-jpwg-5xwr-crpf