CVE-2022-42992 - CVE House
Back to Database
Status published Unknown CVE-2022-42992

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App...

Vulnerability Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-42992

Credits & Attribution

No credits recorded in the NVD database.

References

More from train scheduler app project

View All →
CVE-2022-43079
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler...
Unknown 0

Affected Vendor

train scheduler app project

View all reports →

Affected Software

train scheduler app
Vulnerable Versions:
1.0

Timeline

Official Publish: October 27th, 2022
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.