CVE-2022-46073

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

1.23% chance of exploitation in the next 30 days, 67th percentile

Nuclei

medium · CWE-79

Published

2022-12-14

Updated

2025-04-22

Proof-of-concept exploits (2)

• https://www.youtube.com/watch?v=jT09Uiwl0Jo&ab_channel=IkariShinji
• https://yuyudhn.github.io/CVE-2022-46073/

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46073.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-46072
• CVE-2022-46074
• CVE-2022-46071
• CVE-2022-46076
• CVE-2022-4606
• CVE-2022-46080