CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

CVE-2022-45225

CVE-2022-45225 affects Book Store Management System v1.0. The vulnerability is a cross-site scripting (XSS) defect in the endpoint /bsms_ci/index.php/book , exploitable by injecting a crafted payload into the book_title parameter. The NVD/CVSS data shows a base score of 6.1 (Medium) with AV:N/AC:...