Medium severity6.1NVD Advisory· Published May 23, 2022· Updated Jul 9, 2026

CVE-2022-29005

Description

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpgurukul/Online Birth Certificate Systemllm-fuzzy2 versions
= 1.2+ 1 more
- (no CPE)range: = 1.2
- cpe:2.3:a:phpgurukul:online_birth_certificate_system:1.2:*:*:*:*:*:*:*
Online Birth Certificate System/Online Birth Certificate Systemdescription

Patches

Vulnerability mechanics

References

github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txtnvdThird Party Advisory
phpgurukul.com/online-birth-certificate-system-using-php-and-mysql/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000