Medium severity4.8NVD Advisory· Published Dec 7, 2022· Updated Jun 17, 2026
CVE-2022-45008
CVE-2022-45008
Description
Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:online_leave_management_system_project:online_leave_management_system:1.0:*:*:*:*:*:*:*
- Online Leave Management System/Online Leave Management Systemdescription
- Range: <=1.0
Patches
Vulnerability mechanics
References
1- github.com/realguoxiufeng/bug_report/blob/main/vendors/oretnom23/Online%20Leave%20Management%20System/XSS-1.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.