2 matches found
PT-2022-20129
Name of the Vulnerable Software and Affected Versions Water-billing-management-system version 1.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the /wbms/classes/Users.php API endpoint, specifically when the firstname variable is used with the f=save...
5.4CVSS0.00503EPSS
SaveExploits1References3
CVE-2022-30462: Improper Neutralization of Input During Web Page Generation
Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...
5.4CVSS6AI score0.00503EPSS
SaveExploits1References2
20