Lucene search

VulDBCVELIST:CVE-2022-3580

HistoryOct 18, 2022 - 12:00 a.m.

CVE-2022-3580 SourceCodester Cashier Queuing System User Creation cross site scripting

2022-10-1800:00:00

CWE-707

VulDB

www.cve.org

vulnerability

sourcecodester

cashier queuing system

user creation

cross site scripting

remote attack

vdb-211187

CVSS3

2.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-211187.

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Cashier Queuing System",
    "versions": [
      {
        "version": "1.0.1",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?id.211187

CVSS3

2.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

Related for CVELIST:CVE-2022-3580