CVE-2022-40348

MEDIUM 5.4EPSS 0.8%

Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code.

CVSS v3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.80% chance of exploitation in the next 30 days, 54th percentile
Published: 2023-02-18
Updated: 2025-03-17

Proof-of-concept exploits (1)

h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-U…3★ · 2023-12-25

References

Related