PT-2022-26876 · Unknown · Autotaxi Stand Management System

Sanjay Singh

·

CVE-2022-43369

·

Published

2022-12-06

·

Updated

2023-11-14

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions AutoTaxi Stand Management System version 1.0
Description The AutoTaxi Stand Management System contains a cross-site scripting (XSS) issue via the search.php component. This allows for potential malicious script injection and execution.
Recommendations For AutoTaxi Stand Management System version 1.0, consider disabling the search.php component until a patch is available to prevent exploitation of the XSS vulnerability.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-43369

Affected Products

Autotaxi Stand Management System