CVE-2022-32987 - Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields

Published Jun 23, 2022

4.8

MEDIUM

CVSS 3.1

EPSS 0.54%

Description

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36053
Advisory
https://gist.github.com/mayank-s16/19b22b3b356646dce2639a9400f3f7d9
x_refsource_MISCExploitThird Party Advisory
https://www.campcodes.com/projects/php/simple-bakery-shop-management-system/
x_refsource_MISCProductThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36053		Advisory
https://gist.github.com/mayank-s16/19b22b3b356646dce2639a9400f3f7d9		x_refsource_MISCExploitThird Party Advisory
https://www.campcodes.com/projects/php/simple-bakery-shop-management-system/		x_refsource_MISCProductThird Party Advisory