{"id":"CVE-2022-46073","aliases":["EUVD-2022-48911","GHSA-fqrm-vg33-24gm"],"status":"published","title":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","description":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01321,"percentile":0.71104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-12-14T00:00:00Z","modified":"2026-06-17T05:11:10Z","exploits":[{"source":"nuclei","id":"CVE-2022-46073","title":"Helmet Store Showroom - Cross Site Scripting","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46073.yaml"}],"products":[{"vendor":"helmet_store_showroom_project","product":"helmet_store_showroom"}],"references":[{"url":"https://www.youtube.com/watch?v=jT09Uiwl0Jo\u0026ab_channel=IkariShinji","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://yuyudhn.github.io/CVE-2022-46073/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46073"},{"url":"https://yuyudhn.github.io/CVE-2022-46073"},{"url":"https://github.com/advisories/GHSA-fqrm-vg33-24gm"}],"sources":{"cve":[{"id":"CVE-2022-46073","description":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","status":"published","published":"2022-12-14T00:00:00Z","modified":"2025-04-22T02:28:44.397Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-48911","description":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","status":"published","published":"2022-12-14T00:00:00Z","modified":"2025-04-22T02:28:44Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:17.705566Z"}],"ghsa":[{"id":"GHSA-fqrm-vg33-24gm","title":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","description":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","status":"published","published":"2022-12-14T18:30:25Z","modified":"2025-04-22T03:31:30Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:01:59.076415Z"}],"nvd":[{"id":"CVE-2022-46073","description":"Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).","status":"published","published":"2022-12-14T17:15:11.433Z","modified":"2026-06-17T05:11:10.537Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:33.649381Z"}]}}