CVE-2022-3548

LOW

SourceCodester Simple Cold Storage Management System 1.0 - XSS

Title source: llm

Description

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211048.

References (2)

[Exploit, Third Party Advisory] https://github.com/Ramansh123454/POCs/blob/main/POC

View Exploit ZIP pw:eip

[Third Party Advisory] https://vuldb.com/?id.211048

Scores

CVSS v3 2.4

EPSS 0.0065

EPSS Percentile 70.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-79 CWE-707

Status published

Products (1)

oretnom23/simple_cold_storage_management_system 1.0

Published Oct 17, 2022

Tracked Since Feb 18, 2026