CVE-2022-4554CWE-79

Reflected XSS B2B Dealer Ordering System

Medium · published January 24, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    Reflected XSS B2B Dealer Ordering System
    cvelistv5