Vulnerability Details CVE-2022-25395
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 56.8%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 4.3
References
Products affected by CVE-2022-25395
-
Cosmetics And Beauty Product Online Store Project » Cosmetics And Beauty Product Online Store » Version: 1.0cpe:2.3:a:cosmetics_and_beauty_product_online_store_project:cosmetics_and_beauty_product_online_store:1.0