CVE-2022-2684: falha de baixa gravidade em SourceCodester Apartment Visitor Management…
SourceCodester Apartment Visitor Management System manage-apartment.php cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.7%
A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /manage-apartment.php. The manipulation of the argument Apartment Number with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205672.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
SourceCodester · Apartment Visitor Management SystemCVEs relacionadas — SourceCodester Apartment Visitor Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2677MEDIUMSourceCodester Apartment Visitor Management System index.php sql injectionEPSS 0.8%CVE-2025-4937MEDIUMSourceCodester Apartment Visitor Management System profile.php sql injectionEPSS 0.6%CVE-2025-4481MEDIUMSourceCodester Apartment Visitor Management System search-result.php sql injectionEPSS 0.6%CVE-2025-3045MEDIUMoretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injectionEPSS 0.6%CVE-2022-2772MEDIUMSourceCodester Apartment Visitor Management System action-visitor.php sql injectionEPSS 0.6%CVE-2025-3315MEDIUMSourceCodester Apartment Visitor Management System view-report.php sql injectionEPSS 0.6%