CVE-2022-29004

MediumCVSS 6.1

Published: 23/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.81%

85th percentile - higher than 85% of all known CVEs

Summary

Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php. This allows an attacker to inject malicious scripts into the page.

Risk Assessment

The risk involves potential execution of arbitrary JavaScript in the victim's browser, which could lead to session theft, redirects to malicious sites, or credential theft.

Recommendation

Immediately update Diary Management System to the latest version that includes a fix for the XSS vulnerability. In the meantime, validate and sanitize input data in the Name parameter.

Original NVD description (English source)

Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.