CVE-2022-1980: SourceCodester Product Show Room Site cross site scripting
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but requires authentication. Exploit details have been disclosed to the public.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1980?
CVE-2022-1980 has been rated as problematic.
How do I fix CVE-2022-1980?
To fix CVE-2022-1980, sanitize and validate all user inputs in the 'Telephone' textbox to prevent cross-site scripting.
What type of vulnerability is CVE-2022-1980?
CVE-2022-1980 is classified as a cross-site scripting (XSS) vulnerability.
Which version of the software is affected by CVE-2022-1980?
CVE-2022-1980 affects SourceCodester Product Show Room Site version 1.0.
Where does CVE-2022-1980 occur in the application?
CVE-2022-1980 occurs in the file /admin/?page=system_info/contact_info.