CVE-2022-36668

Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-09-14

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Garage Management System (Garage Management System Project)

References

• https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md
• https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html