nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-50896 CVE-2022-50896
MEDIUM
Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)
Record summary
CVE-2022-50896 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts. Attackers can craft a specially encoded payload in the redirect parameter to execute arbitrary JavaScript in victim's browser context.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 14, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
TestaBrowse Testa / Testa | CVE List | 3.5.1 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBTesta 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)ExploitDB exploitby Ashkan MoghaddasNot analyzed1 file
References
4Archived Product Homepageproduct
https://web.archive.org/web/20220406031253/https://testa.cc ExploitDB-51023exploit
https://www.exploit-db.com/exploits/51023 VulnCheck Advisory: Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)Third-party advisory
https://www.vulncheck.com/advisories/testa-online-test-management-system-reflected-cross-site-scripting-xss