Vulnerability Details CVE-2022-39054
Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.7%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2022-39054
-
Cowell Enterprise Travel Management System Project » Cowell Enterprise Travel Management System » Version: N/Acpe:2.3:a:cowell_enterprise_travel_management_system_project:cowell_enterprise_travel_management_system:-