CVE-2022-24572

Published: Feb 28, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.

Affected (1)

Products: Car Driving School Management System Project: Car Driving School Management System

Car Driving School Management System Project

1 product

Car Driving School Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Car Driving School Management System Project Car Driving School Management System	Version 1.0

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.