Medium severity4.8NVD Advisory· Published Nov 28, 2022· Updated Jun 17, 2026

CVE-2022-45221

Description

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnew_password parameter.

Affected products

Web Based Student Clearance System Project/Web Based Student Clearance System
cpe:2.3:a:web-based_student_clearance_system_project:web-based_student_clearance_system:1.0:*:*:*:*:*:*:*
Web-Based Student Clearance System/Web-Based Student Clearance Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.0

Patches

Vulnerability mechanics

References

medium.com/%40just0rg/web-based-student-clearance-system-in-php-free-source-code-v1-0-unrestricted-input-leads-to-xss-5802ead12124nvd

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000