CVE-2022-29005
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 2.2%
exploitation probability
2.2%top 19% of all CVEs
observed exploitation
nono source reports it
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.
Affected products
n/a · n/a