CVE-2022-3587

LOW

SourceCodester Simple Cold Storage Management System 1.0 - XSS

Title source: llm

Description

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211201 was assigned to this vulnerability.

References (2)

[Exploit, Third Party Advisory] https://github.com/rsrahulsingh05/POC/blob/main/Stored%20XSS

View Exploit ZIP pw:eip

[Permissions Required, Third Party Advisory] https://vuldb.com/?id.211201

Scores

CVSS v3 3.5

EPSS 0.0032

EPSS Percentile 55.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-79 CWE-707

Status published

Products (1)

oretnom23/simple_cold_storage_management_system 1.0

Published Oct 18, 2022

Tracked Since Feb 18, 2026