Medium severity6.1NVD Advisory· Published Dec 21, 2022· Updated Jun 17, 2026
CVE-2022-46096
CVE-2022-46096
Description
A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to register.php without logging in.
Affected products
3- Sourcecodester/Online Covid-19 Directory on Vaccination Systemdescription
- Range: = 1.0
- cpe:2.3:a:covid-19_directory_on_vaccination_system_project:covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/Frank-Z7/z-vulnerabilitys/blob/main/covid-19-vaccination-poc2/covid-19-vaccination2.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.