Cross-Site Scripting Vulnerability in Online Examination System by Project Worlds

CVE-2022-42066

What is CVE-2022-42066?

The Online Examination System version 1.0 is susceptible to a cross-site scripting (XSS) vulnerability that occurs through the 'index.php' file. An attacker can exploit this vulnerability by injecting malicious scripts into web pages viewed by other users, potentially leading to unauthorized access to sensitive information or session hijacking. It is crucial for users of this system to implement security measures to mitigate the risks associated with such vulnerabilities.

References