Stored Cross-Site Scripting Vulnerability in Revenue Collection System by Unknown Vendor
CVE-2022-46968

5.4MEDIUM

Key Information:

Vendor: Revenue Collection System Project
Status: Revenue Collection System
Vendor: CVE Published:; 27 January 2023

🔔 Create Revenue Collection System Project Vulnerability Alert

What is CVE-2022-46968?

The Revenue Collection System version 1.0 contains a stored cross-site scripting (XSS) vulnerability located in /index.php?page=help. This flaw allows attackers to inject malicious scripts or HTML into messages that are stored within the application, leading to potential exploitation. When unsuspecting users access these compromised messages, the injected scripts execute in their browsers, posing serious security risks and compromising user data.

References

https://packetstormsecurity.com/files/169917/Revenue-Coll...

https://cxsecurity.com/issue/WLB-2022110027

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 27, 2023
Vulnerability Reserved
Dec 12, 2022

CVE-2022-46968 Data

JSON