CVE-2022-42992

2022-10-2700:00:00

mitre

www.cve.org

cross-site scripting

train scheduler app

arbitrary web scripts

html

crafted payload

train code

train name

destination.

0.001 Low

EPSS

Percentile

28.1%

JSON

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields.

References

oretnom23.com

train.com

github.com/draco1725/POC/blob/main/Exploit/Train%20Scheduler%20App/XSS

0.001 Low

EPSS

Percentile

28.1%

JSON

Related for CVELIST:CVE-2022-42992