CVE-2022-42993

The CVE-2022-42993 issue affects Password Storage Application v1.0 and is a cross-site scripting (XSS) vulnerability exposed via the Setup page. The root cause, as described in connected sources, is insufficient filtering/escaping of user-supplied data on the settings page, enabling cookie-based ...

CVE-2022-43117

CVE-2022-43117 affects Sourcecodester Password Storage Application (PHP/OOP, MySQL) v1.0. The issue is multiple cross-site scripting (XSS) vulnerabilities exploitable via the Name, Username, Description and Site Feature parameters. The PT-2022-26759 entry elaborates the affected version and vulne...

CVE-2022-43142

The CVE-2022-43142 issue affects Password Storage Application v1.0, specifically the add-fee.php component. A cross-site scripting (XSS) vulnerability allows an attacker to inject a crafted payload via the cmddept parameter, causing execution of arbitrary web scripts or HTML. CVSS/metrics in the ...