CVE-2022-1979 LOW

CVE-2022-1979: SourceCodester Product Show Room Site p=contact cross site scripting

Vendor Sourcecodester

Product Product Show Room Site

Weakness CWE-79 · XSS

Published June 2, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires authentication. Exploit details have been disclosed to the public.

Key dates

02Disclosure timeline

June 2, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1979 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-2678 SourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting CVE-2023-3887 Campcodes Beauty Salon Management System search-appointment.php cross site scripting CVE-2026-6817 Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' CVE-2021-25993 Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor CVE-2024-38686 WordPress FancyPost plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability