Lucene search
HistorySep 12, 2022 - 12:15 a.m.
CVE-2022-37796
online book store
cross site scripting
admin book management
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).
Affected configurations
Node
oretnom23simple_online_book_store_systemMatch1.0
Related
cve
cve
CVE-2022-37796
2022-09-12 00:15:10
cvelist
cvelist
CVE-2022-37796
2022-09-11 23:31:39
prion
prion
Cross site scripting
2022-09-12 00:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
Related for NVD:CVE-2022-37796