CVE-2022-45008

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component…

Medium · published December 7, 2022

CVSS v3.1
4.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2022-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component…
    cvelistv5