SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-2811

A vulnerability classified as problematic has been found in SourceCodester Guest Management System.

MEDIUM 6.1EPSS 0.60%

Does this matter?

Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206397 was assigned to this vulnerability.

CVSS 3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.60% probability · 47th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
guest management system project/guest management system
Source
cna@vuldb.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.