PoC Index

CVE-2022-36668

MEDIUM 5.4EPSS 0.5%

Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.

CVSS v3.1
5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.53% chance of exploitation in the next 30 days, 43th percentile
Published
2022-09-14
Updated
2024-08-03

Proof-of-concept exploits (1)

References

Related