Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-73497
HistoryMar 18, 2022 - 12:00 a.m.

Online Project Time Management System Cross-Site Scripting Vulnerability

2022-03-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.001 Low

EPSS

Percentile

39.0%

Online Project Time Management System is a web-based online project time management system that provides an online platform for a company’s employees to report/record their assigned time or the time each project is resubmitted. online project time management system A cross-site scripting vulnerability exists in v1.0, which stems from a lack of data validation filtering of user-supplied data and output in /ptms/?page=user. An attacker could exploit this vulnerability to execute arbitrary Web script or HTML by injecting a specially crafted payload in the user name field.

0.001 Low

EPSS

Percentile

39.0%

Related for CNVD-2022-73497