SourceCodester Product Show Room Site cross site scripting
CVE-2022-1980

2.4LOW

Key Information:

Vendor
Sourcecodester
Status
Product Show Room Site
Vendor
CVE Published:
2 June 2022

Summary

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input alert(1) leads to cross site scripting. The attack may be initiated remotely but requires authentication. Exploit details have been disclosed to the public.

Affected Version(s)

Product Show Room Site 1.0

References

https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/...
x_refsource_MISC
https://vuldb.com/?id.200951
x_refsource_MISC

CVSS V3.1

Score:
2.4
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.