CVE-2022-45221

2022-11-2800:00:00

mitre

www.cve.org

web-based

student clearance system

xss

vulnerability

txtnew_password parameter

0.001 Low

EPSS

Percentile

22.8%

JSON

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnew_password parameter.