CVE-2022-1991 - CVE House
Back to Database
Status published Low CVE-2022-1991

Fast Food Ordering System Master List Master.php cross site scripting

Vulnerability Description

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1991

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

unspecified

View all reports →

Affected Software

Fast Food Ordering System
Vulnerable Versions:
1.0

Timeline

Official Publish: June 3rd, 2022
Last Modified: April 15th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)