PT-2021-17631 · Unknown · Vehicle Parking Management System
CVE-2021-27822
·
Published
2021-08-19
·
Updated
2023-11-14
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
Vehicle Parking Management System version 1.0
Description:
A persistent cross site scripting (XSS) issue in the Add Categories module allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the
Category field.Recommendations:
For Vehicle Parking Management System version 1.0, consider disabling the Add Categories module until a patch is available to prevent exploitation of the XSS issue. Restrict access to the Category field to minimize the risk of arbitrary script execution.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vehicle Parking Management System