CVE-2022-3580lowCWE-707

CVE-2022-3580: low-severity vulnerability in SourceCodester Cashier Queuing System

SourceCodester Cashier Queuing System User Creation cross site scripting

Published · Updated

Follow this CVE+ Monitor Cashier Queuing System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.4epss 0.4%
A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-211187.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Cashier Queuing System
Related CVEs — SourceCodester Cashier Queuing System

In the same product, most dangerous first.

CVE-2022-3579MEDIUMSourceCodester Cashier Queuing System Login Page login.php sql injectionEPSS 0.8%CVE-2025-8973MEDIUMSourceCodester Cashier Queuing System Actions.php sql injectionEPSS 0.5%CVE-2022-3581LOWSourceCodester Cashier Queuing System Cashiers Tab cross site scriptingEPSS 0.4%