CVE-2022-2293
Assigner: VulDB
Published: 2022-07-12T14:12:48
State: PUBLISHED
affected: product: Simple Sales Management System
vendor: SourceCodester
versions: status: affected
version: 1.0
descriptions: value: A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ci_ssms/index.php/orders/create. The manipulation of the argument customer_name with the input <script>alert("XSS")</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross Site Scripting
type: CWE
title: SourceCodester Simple Sales Management System create cross site scripting
x_generator: vuldb.com