Vulnerabilities

TI-2022-21039 CVE-2022-43117 · GHSA-hc5m-68rf-53fj

Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to…

MEDIUM 58

Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Name, Username, Description and Site Feature parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00856 Published 2022-11-21 No fix listed CWE-79

TI-2022-21051 CVE-2022-43142 · GHSA-jwfc-52x9-vj73

A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password…

LOW 28

A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept param…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00463 Published 2022-11-17 No fix listed CWE-79

TI-2022-20968 CVE-2022-42993 · GHSA-vmxf-xq75-pgxr

Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS)…

MEDIUM 58

Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00544 Published 2022-10-27 No fix listed CWE-79

Vulnerabilities

Filters

Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to…

A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password…

Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS)…