Lucene search

[email protected]NVD:CVE-2022-2725

HistoryAug 09, 2022 - 7:15 a.m.

CVE-2022-2725

2022-08-0907:15:07

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

sourcecodester

website cms

add-blog.php

cross-site scripting

remote attack

vdb-205838

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

A vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add-blog.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-205838 is the identifier assigned to this vulnerability.

Affected configurations

Nvd

Node

company_website_cms_projectcompany_website_cmsMatch-

VendorProductVersionCPE
company_website_cms_projectcompany_website_cms-cpe:2.3:a:company_website_cms_project:company_website_cms:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
company_website_cms_project	company_website_cms	-	cpe:2.3:a:company_website_cms_project:company_website_cms:-:::::::*

References

vuldb.com/?id.205838

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

Related for NVD:CVE-2022-2725

cvelist1 cve1 prion1