CVE-2022-1979: SourceCodester Product Show Room Site p=contact cross site scripting
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires authentication. Exploit details have been disclosed to the public.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1979?
CVE-2022-1979 is classified as a cross site scripting (XSS) vulnerability that could allow an attacker to execute malicious scripts in the context of the user's session.
How do I fix CVE-2022-1979?
To fix CVE-2022-1979, input validation and output encoding should be implemented to sanitize user inputs in the message textbox.
What version of the software is affected by CVE-2022-1979?
CVE-2022-1979 affects version 1.0 of the SourceCodester Product Show Room Site software.
Can CVE-2022-1979 lead to data theft?
Yes, CVE-2022-1979 could be exploited to execute scripts that may lead to the theft of sensitive user data.
Is CVE-2022-1979 easy to exploit?
CVE-2022-1979 can be easily exploited by crafting a malicious input in the message textbox, which requires minimal technical skills.