PT-2022-20674

CVE-2022-31299

Published

2022-06-16

Updated

2022-06-27

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Haraj version 3.7

Description A reflected cross-site scripting (XSS) issue was found in the User Upgrade Form. This could potentially allow attackers to inject malicious scripts into the website, affecting users who interact with the compromised form.

Recommendations For Haraj version 3.7, update the User Upgrade Form to properly sanitize user input and prevent XSS attacks. As a temporary workaround, consider restricting access to the User Upgrade Form until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Abdulaziz Saad

B4Zb0Z

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers