CVE-2022-1086

LOW

DolphinPHP < 1.5.0 - Cross-Site Scripting in User Management Page

Title source: llm
STIX 2.1

Description

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.195368

Scores

CVSS v3 3.5
EPSS 0.0061
EPSS Percentile 44.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
dolphinphp_project/dolphinphp < 1.5.0
Published Mar 29, 2022
Tracked Since Feb 18, 2026