CVE-2022-1079

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.2%
top 52.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester ONE Church Management SystemONE Church Management System Project ONE Church Management System
Timeline
PublishedMar 29
Latest updateMar 30

Description

A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-69pp-xh8f-m5vr: A vulnerability classified as problematic has been found in SourceCodester One Church Management System↗2022-03-30
▶
CVEList
SourceCodester One Church Management System churchprofile.php cross site scripting↗2022-03-29
▶
CVE-2022-1079 (MEDIUM CVSS 6.1) | A vulnerability classified as probl | cvebase.io