3 matches found
CVE-2022-30482
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
4.8CVSS6AI score0.00775EPSS
SaveExploits1References1
CVE-2022-30482
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
4.8CVSS5.8AI score0.00775EPSS
SaveExploits1References3
CVE-2022-30482
Vulnerability summary: The package named “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0” is vulnerable to Cross Site Scripting (XSS) in the administrative page admin/add_cata.php via the ctg_name parameter. Root cause: The ctg_name input/output handling lacks a checksum/adequate filteri...
4.8CVSS4.8AI score0.00775EPSS
SaveExploits1References3Affected Software1
20