Cross site scripting

2022-07-1217:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument search with the input "><script>alert(“XSS”)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CPENameOperatorVersion
simple_parking_management_systemeq1.0

CPE	Name	Operator	Version
	simple_parking_management_system	eq	1.0

References

github.com/CyberThoth/CVE/blob/eea3090b960da014312f7ad4b09aa58d23966d77/CVE/Simple%20Parking%20Management%20System/Cross%20Site%20Scripting(Refelected)/POC.md

vuldb.com/?id.203420