CVE-2022-2682

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

0.2%

top 56.23%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Alphaware Simple E-commerce System

Timeline

PublishedAug 5

Latest updateAug 6

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '">alert(/xss/) leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205670 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages1 packages

▶CVEListV5sourcecodester/alphaware_simple_e-commerce_systemn/a

🔴Vulnerability Details

GHSA

GHSA-92xr-fx43-q8fp: A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System↗2022-08-06

▶

CVEList

SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting↗2022-08-05

▶