{"id":"CVE-2022-1079","aliases":["EUVD-2022-24423","GHSA-69pp-xh8f-m5vr"],"status":"published","title":"SourceCodester One Church Management System churchprofile.php cross site scripting","description":"A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00562,"percentile":0.47078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-03-29T05:50:42Z","modified":"2026-06-17T04:21:47Z","products":[{"vendor":"one_church_management_system_project","product":"one_church_management_system"},{"vendor":"sourcecodester","product":"one church management system"}],"references":[{"url":"https://vuldb.com/?id.195426","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1079"},{"url":"https://github.com/advisories/GHSA-69pp-xh8f-m5vr"}],"sources":{"cve":[{"id":"CVE-2022-1079","title":"SourceCodester One Church Management System churchprofile.php cross site scripting","description":"A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.","status":"published","published":"2022-03-29T05:50:42Z","modified":"2025-04-15T14:44:02.03Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:38.263045Z"}],"euvd":[{"id":"EUVD-2022-24423","description":"A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.","status":"published","published":"2022-03-29T05:50:42Z","modified":"2025-04-15T14:44:02Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:28.823587Z"}],"ghsa":[{"id":"GHSA-69pp-xh8f-m5vr","title":"A vulnerability classified as problematic has been found in SourceCodester One Church Management...","description":"A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.","status":"published","published":"2022-03-30T00:00:28Z","modified":"2023-01-27T05:01:17Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:51.63425Z"}],"nvd":[{"id":"CVE-2022-1079","description":"A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.","status":"published","published":"2022-03-29T06:15:07.673Z","modified":"2026-06-17T04:21:47.16Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:14.706146Z"}]}}