CVE-2022-28078

MediumCVSS 6.1

Published: 11/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

61th percentile - higher than 61% of all known CVEs

Summary

Home Owners Collection Management v1 was found to have a reflected XSS vulnerability in the Admin panel via the $_GET['page'] parameter. An attacker can inject malicious script.

Risk Assessment

The risk involves arbitrary JavaScript execution in the admin's browser, potentially leading to session theft, account takeover, or content manipulation.

Recommendation

Update the system to the latest version or implement output filtering and encoding for the 'page' parameter in the admin panel.

Original NVD description (English source)

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.