CVE-2022-1079mediumCWE-79

CVE-2022-1079: medium-severity vulnerability in SourceCodester One Church Management System

SourceCodester One Church Management System churchprofile.php cross site scripting

Published · Updated

Follow this CVE+ Monitor One Church Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.6%
A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · One Church Management System
Related CVEs — SourceCodester One Church Management System

In the same product, most dangerous first.

CVE-2022-1084HIGHSourceCodester One Church Management System Session userregister.php improper authenticationEPSS 1.0%CVE-2022-1080HIGHSourceCodester One Church Management System attendancy.php sql injectionEPSS 0.7%