Medium severity5.4NVD Advisory· Published Mar 16, 2022· Updated Jun 17, 2026
CVE-2022-26295
CVE-2022-26295
Description
A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:online_project_time_management_system_project:online_project_time_management_system:1.0:*:*:*:*:*:*:*
- Online Project Time Management System/Online Project Time Management Systemdescription
- Range: = 1.0
Patches
Vulnerability mechanics
References
1- www.exploit-db.com/exploits/50683nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.