{"id":"CVE-2022-24572","aliases":["EUVD-2022-29451","GHSA-cqmm-8fxw-w8cq"],"status":"published","title":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User...","description":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00641,"percentile":0.51205,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-02-28T13:14:38Z","modified":"2026-06-17T04:32:07Z","products":[{"vendor":"car_driving_school_management_system_project","product":"car_driving_school_management_system"}],"references":[{"url":"https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24572"},{"url":"https://github.com/advisories/GHSA-cqmm-8fxw-w8cq"}],"sources":{"cve":[{"id":"CVE-2022-24572","description":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.","status":"published","published":"2022-02-28T13:14:38Z","modified":"2024-08-03T04:13:56.9Z","updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29451","description":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.","status":"published","published":"2022-02-28T13:14:38Z","modified":"2024-08-03T04:13:56Z","updated_at":"2026-11-03T03:25:48.993963Z"}],"ghsa":[{"id":"GHSA-cqmm-8fxw-w8cq","title":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User...","description":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.","status":"published","published":"2022-03-01T00:00:27Z","modified":"2023-02-03T05:06:42Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:53:56.446132Z"}],"nvd":[{"id":"CVE-2022-24572","description":"Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.","status":"published","published":"2022-02-28T14:15:08.457Z","modified":"2026-06-17T04:32:07.553Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:12.711288Z"}]}}