CVE-2022-25395

2022-03-0222:39:27

mitre

www.cve.org

xss

reflected

cross-site scripting

search parameter

cbpos app

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Cosmetics-and-Beauty-Product-Online-Store