CVE-2022-3546

SourceCodester Simple Cold Storage Management System Create User cross site scripting

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-211046 is the identifier assigned to this vulnerability.

Affected

SourceCodester · Simple Cold Storage Management System

CVSS v3.1 NVD

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1 VULDB

2.4 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS

0.74% chance of exploitation in the next 30 days, 54th percentile

Published

2022-10-17

Updated

2024-08-03

Proof-of-concept exploits (2)

• thehackingverse/Stored-xss-/blob/main/Poc0★ · 2023-05-10
• thehackingverse/CVE-2022-35460★ · 2023-05-10

Security advisories

• https://vuldb.com/?id.211046

References

• CVE Record
• NVD entry

Related

• CVE-2023-2594