CVE-2022-3547
published 2022-10-17CVE-2022-3547: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of…
PriorityP422medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.62%
49.2th percentile
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=system_info of the component Setting Handler. The manipulation of the argument System Name/System Short Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-211047.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| simple_cold_storage_management_system_project | simple_cold_storage_management_system | — | — |
| sourcecodester | simple_cold_storage_management_system | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SourceCodester Simple Cold Storage Management System 1.0 Setting ?page=system_info System Name/System Short Name cross site scripting (EUVD-2022-42913)
vuldb·2026-07-17·CVSS 4.8
CVE-2022-3547 [MEDIUM] SourceCodester Simple Cold Storage Management System 1.0 Setting ?page=system_info System Name/System Short Name cross site scripting (EUVD-2022-42913)
A vulnerability labeled as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /csms/admin/?page=system_info of the component Setting Handler. Such manipulation of the argument System Name/System Short Name leads to cross site scripting.
This vulnerability is documented as CVE-2022-3547. The attack can be executed remotely. Additionally, an exploit exists.
GHSA
GHSA-2f29-75qf-r6xg: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1
ghsa_unreviewed·2022-10-17
CVE-2022-3547 [MEDIUM] CWE-707 GHSA-2f29-75qf-r6xg: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=system_info of the component Setting Handler. The manipulation of the argument System Name/System Short Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-211047.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-17
Published