CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking

published February 22, 2022

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.0th percentile
Published
2022-02-22T11:12Z
EPSS history
Timeline
  • 22 FEB 11:12Z
    Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking
    cvelistv5