CVE-2022-4377

MEDIUM Year: 2022
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-707
View all →

Vulnerability Description

A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215197 was assigned to this vulnerability.

Related Vulnerabilities

CVE-2020-11026

MEDIUM
CVSS:5.4(Medium)

In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file. This requires an authenticated user with...

CWE-7072020

CVE-2020-11030

MEDIUM
CVSS:5.4(Medium)

In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This requires an authenticated user with the ...

CWE-7072020

CVE-2020-36609

MEDIUM
CVSS:5.4(Medium)

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler...

CWE-7072020

CVE-2022-3333

MEDIUM
CVSS:5.4(Medium)

A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler....

CWE-7072022

CVE-2022-3434

MEDIUM
CVSS:5.4(Medium)

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The...

CWE-7072022

CVE-2022-3452

MEDIUM
CVSS:5.4(Medium)

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation o...

CWE-7072022