Cross site scripting

2022-10-2714:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

vulnerability

simple online public access catalog

arbitrary execution

edit account full name field

0.001 Low

EPSS

Percentile

28.1%

JSON

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

CPENameOperatorVersion
simple_online_public_access_catalogeq1.0

CPE	Name	Operator	Version
	simple_online_public_access_catalog	eq	1.0

References

oretnom23.com

github.com/draco1725/POC/blob/main/Exploit/Simple%20Online%20Public%20Access%20Catalog/XSS

simple.com

0.001 Low

EPSS

Percentile

28.1%

JSON

Related for PRION:CVE-2022-42991