Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2022-29004

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
6.1MEDIUM
EPSS
39.7%
top 2.69%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Phpgurukul E-diary Management System
Timeline
PublishedMay 23
Latest updateMay 24

Description

Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2h8j-xgvj-94wp: Diary Management System v1↗2022-05-24
▶
CVEList
CVE-2022-29004: Diary Management System v1↗2022-05-23
▶

💥Exploits & PoCs

1
Nuclei
Diary Management System 1.0 - Cross-Site Scripting
▶
CVE-2022-29004 (MEDIUM CVSS 6.1) | Diary Management System v1.0 was di | cvebase.io