CVE-2022-1991

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
unspecified	Fast Food Ordering System	1.0

References

https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6Exploit, Third Party Advisory
https://vuldb.com/?id.201276Permissions Required, Third Party Advisory
https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6Exploit, Third Party Advisory
https://vuldb.com/?id.201276Permissions Required, Third Party Advisory

Timeline

Published: Jun 7, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-19929.1Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.CVE-2022-19938.1Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.CVE-2022-19944.8The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing h CVE-2022-19954.8The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with adminis CVE-2022-19969.1Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.CVE-2022-19975.4Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.CVE-2022-19987.8A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to CVE-2022-19995.3An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1 CVE-2022-20007.8Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-200017.8fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can conta CVE-2022-200027.8In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of p CVE-2022-200047.8In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lea