CVE-2022-1075

College Website Management System Contact cross site scripting

CVSS 3.5 LOWEPSS 0.4%CWE-79

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Produtos afetados

unspecified · College Website Management System

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://vuldb.com/?id.194846 https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.ht