Lucene search

K
cveMitreCVE-2022-46503
HistoryJan 12, 2023 - 3:15 p.m.

CVE-2022-46503

2023-01-1215:15:10
CWE-79
mitre
web.nvd.nist.gov
17
cve-2022-46503
cross-site scripting
xss
online student enrollment system
security vulnerability
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

24.7%

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter.

Affected configurations

Nvd
Node
online_student_enrollment_system_projectonline_student_enrollment_systemMatch1.0
VendorProductVersionCPE
online_student_enrollment_system_projectonline_student_enrollment_system1.0cpe:2.3:a:online_student_enrollment_system_project:online_student_enrollment_system:1.0:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

24.7%

Related for CVE-2022-46503