Cross-Site Scripting Vulnerability in Home Owners Collection Management System
CVE-2022-25028

6.1MEDIUM

Key Information:

Vendor: Home Owners Collection Management System Project
Status: Home Owners Collection Management System
Vendor: CVE Published:; 28 February 2022

🔔 Create Home Owners Collection Management System Project Vulnerability Alert

What is CVE-2022-25028?

The Home Owners Collection Management System version 1.0 contains a cross-site scripting vulnerability that can be exploited via the 'collected_by' parameter within the List of Collections module. This security flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive data and user interactions.

References

https://raw.githubusercontent.com/fuzzyap1/Vendors-System...

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 28, 2022
Vulnerability Reserved
Feb 14, 2022

CVE-2022-25028 Data

JSON