CVE-2022-3434: SourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210356.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3434?
The severity of CVE-2022-3434 is medium with a CVSS score of 5.4.
Where is the vulnerability located?
The vulnerability is located in the 'prepare' function of the file /Admin/add-student.php in the SourceCodester Web-Based Student Clearance System.
What is the impact of the vulnerability?
The vulnerability allows for cross-site scripting (XSS) attacks and can be exploited remotely.
How can the vulnerability be exploited?
The vulnerability can be exploited by manipulating the 'prepare' function of the file /Admin/add-student.php in the SourceCodester Web-Based Student Clearance System.
Is there a fix available for CVE-2022-3434?
No information about a fix is provided in the vulnerability report. It is recommended to contact the vendor or developer for information on a patch or update.