{"id":"CVE-2022-25575","aliases":["EUVD-2022-30237","GHSA-h5qh-rvx7-qvf9"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00641,"percentile":0.51036,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-03-24T21:32:44Z","modified":"2026-06-17T04:33:42Z","products":[{"vendor":"hongmen","product":"parking_management_system"}],"references":[{"url":"https://github.com/gou-web/Parking-management-systemXSS-/blob/main/README.md","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25575"},{"url":"https://github.com/advisories/GHSA-h5qh-rvx7-qvf9"}],"sources":{"cve":[{"id":"CVE-2022-25575","description":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes.","status":"published","published":"2022-03-24T21:32:44Z","modified":"2024-08-03T04:42:50.001Z","updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-30237","description":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes.","status":"published","published":"2022-03-24T21:32:44Z","modified":"2024-08-03T04:42:50Z","updated_at":"2026-11-03T03:25:46.954473Z"}],"ghsa":[{"id":"GHSA-h5qh-rvx7-qvf9","title":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes.","status":"published","published":"2022-03-26T00:00:34Z","modified":"2023-01-27T05:01:06Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:49.063625Z"}],"nvd":[{"id":"CVE-2022-25575","description":"Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes.","status":"published","published":"2022-03-24T22:15:09.283Z","modified":"2026-06-17T04:33:42.863Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:14.24948Z"}]}}