PoC Index85,101 CVEs with PoCs

CVE-2022-2396

SourceCodester Simple e-Learning System claire_blake cross site scripting

MEDIUM 5.4EPSS 0.6%

A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claire_blake. The manipulation of the argument Bio with the input "><script>alert(document.cookie)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected
SourceCodester · Simple e-Learning System
CVSS v3.1 NVD
5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1 VULDB
3.5 LOWCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS
0.56% chance of exploitation in the next 30 days, 46th percentile
Published
2022-07-14
Updated
2025-04-15

Proof-of-concept exploits (2)

References

Related