CVE-2022-4253 - SourceCodester Canteen Management System customer.php builtin_echo cross site scripting

Back Back to CVE browser

MEDIUM

SourceCodester Canteen Management System customer.php builtin_echo cross site scripting

Published Dec 1, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214630 is the identifier assigned to this vulnerability.

Affected products

Vendor SourceCodester Product Canteen Management System Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Canteen Management System

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-707

References (2)

https://blog.csdn.net/weixin_43864034/article/details/128127516
ExploitThird Party Advisory
https://vuldb.com/?id.214630
Third Party Advisory

Link	Providers	Tags
https://blog.csdn.net/weixin_43864034/article/details/128127516		ExploitThird Party Advisory
https://vuldb.com/?id.214630		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Dec 1, 2022

Updated Apr 15, 2025

Reserved Dec 1, 2022

Link CVE-2022-4253

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-4253

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-4253