CVE-2022-3452: SourceCodester Book Store Management System category.php cross site scripting
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210436.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3452?
CVE-2022-3452 is classified as a problematic vulnerability due to its potential for cross-site scripting attacks.
How does CVE-2022-3452 affect the Book Store Management System?
CVE-2022-3452 affects the category_name argument in the /category.php file of the Book Store Management System, enabling the injection of malicious scripts.
How do I fix CVE-2022-3452?
To fix CVE-2022-3452, ensure proper input validation and sanitization on the category_name parameter in the affected file.
Which version of the Book Store Management System is impacted by CVE-2022-3452?
CVE-2022-3452 specifically impacts version 1.0 of the Book Store Management System.
Is CVE-2022-3452 easy to exploit?
Yes, CVE-2022-3452 can be easily exploited due to the insufficient filtering of user input in the application.