CVE-2022-40028

MediumCVSS 4.8

Published: 21/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php file. Attackers can inject arbitrary web scripts or HTML via the fullName parameter.

Risk Assessment

The risk involves executing arbitrary scripts in the victim's browser, potentially leading to session hijacking, malicious redirects, or data theft.

Recommendation

Update the system to the latest version or implement input filtering and validation for the fullName parameter to prevent script injection.

Original NVD description (English source)

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.