CVE-2022-28077

MediumCVSS 6.1

Published: 11/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

52th percentile - higher than 52% of all known CVEs

Summary

Home Owners Collection Management v1 was found to have a reflected XSS vulnerability in the Admin panel via the $_GET['s'] parameter. An attacker can inject malicious script.

Risk Assessment

The risk involves arbitrary JavaScript execution in the admin's browser, potentially leading to session theft, account takeover, or content manipulation.

Recommendation

Immediately update the system to the latest version or implement input filtering and validation for the 's' parameter.

Original NVD description (English source)

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.