CVE-2022-3493 - CVE House

Back to Database

Status published Low CVE-2022-3493

SourceCodester Human Resource Management System Add Employee cross site scripting

3.5 CVSS

Vulnerability Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3493

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://vuldb.com/?id.210773

More from SourceCodester

View All →

SourceCodester Online Farm Management System login.php sql injection

SourceCodester Food Ordering Management System register-router.php sql injection

SourceCodester Hotel Reservation System updateabout.php sql injection

SourceCodester Online Hotel Reservation System edituser.php sql injection

SourceCodester/Campcodes School Log Management System admin_class.php sql injection

Affected Vendor

SourceCodester

View all reports →

Affected Software

Human Resource Management System

Vulnerable Versions:

1.0

Timeline

Official Publish: October 13th, 2022

Last Modified: November 20th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1071 Application Layer Protocol

Command and Control

T1565 Data Manipulation

T1005 Data from Local System