CVE-2022-4233

CWE-707CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.4%
top 42.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Event Registration SystemRinvizle Event Registration System
Timeline
PublishedNov 30

Description

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-214591.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Event Registration System cross site scripting↗2022-11-30
▶
GHSA
GHSA-6xwm-7j8r-772w: A vulnerability has been found in SourceCodester Event Registration System 1↗2022-11-30
▶
CVE-2022-4233 (MEDIUM CVSS 6.1) | A vulnerability has been found in S | cvebase.io