Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-02805
HistoryJan 07, 2022 - 12:00 a.m.

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02805)

2022-01-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
sourcecodester
vehicle service management system
php project
cross-site scripting
vulnerability
user list
login panel
attacker
storage

EPSS

0.001

Percentile

44.3%

Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System version 1.0 contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping in the user list section of the software’s login panel, which could be exploited by an attacker to cause a storage A cross-site scripting vulnerability exists in Sourcecodester Vehicle Service Management System version 1.0.

EPSS

0.001

Percentile

44.3%