CVE-2022-40029

MediumCVSS 4.8

Published: 21/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php component. Attackers can inject arbitrary web scripts or HTML via the shortName parameter.

Risk Assessment

The risk involves executing arbitrary scripts in the victim's browser, potentially leading to session theft, account takeover, or displaying fraudulent content.

Recommendation

Update the system to the latest version or implement input filtering and validation for the shortName parameter in newProjectValidation.php.

Original NVD description (English source)

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.