CVE-2022-2681

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input <script>alert(/xss/)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205669 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-268107.8Windows File Server Resource Management Service Elevation of Privilege VulnerabilityCVE-2022-268117.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268127.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268137.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268146.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268157.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268166.5Windows DNS Server Information Disclosure VulnerabilityCVE-2022-268176.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268186.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-268196.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2022-26825.4A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this CVE-2022-268206.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2022-2681: Medium severity, CVSS 6.1 | Vulnix