Lucene search

VulDBCVELIST:CVE-2022-3949

HistoryNov 11, 2022 - 12:00 a.m.

CVE-2022-3949 Sourcecodester Simple Cashiering System User Account cross site scripting

2022-11-1100:00:00

CWE-707

VulDB

www.cve.org

vulnerability

cross site scripting

sourcecodester simple cashiering system

user account handler

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-213455.

CNA Affected

[
  {
    "vendor": "Sourcecodester",
    "product": "Simple Cashiering System",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?id.213455

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

Related for CVELIST:CVE-2022-3949