{"api_version":"1","generated_at":"2026-07-23T14:27:49+00:00","cve":"CVE-2022-4401","urls":{"html":"https://cve.report/CVE-2022-4401","api":"https://cve.report/api/cve/CVE-2022-4401.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-4401","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-4401"},"summary":{"title":"CVE-2022-4401","description":"A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268.","state":"PUBLIC","assigner":"cna@vuldb.com","published_at":"2022-12-11 08:15:00","updated_at":"2024-02-01 15:30:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://vuldb.com/?id.215268","name":"https://vuldb.com/?id.215268","refsource":"MISC","tags":[],"title":"CVE-2022-4401 | pallidlight online-course-selection-system cross site scripting","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW","name":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW","refsource":"MISC","tags":[],"title":"xss攻击 · Issue #I5XNHW · pallidlight/基于Java的网上选课系统 - Gitee.com","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4401","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4401","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"4401","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pallidlight_online_course_selection_system_project","cpe5":"pallidlight_online_course_selection_system","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2022-4401","TITLE":"pallidlight online-course-selection-system cross site scripting","REQUESTER":"cna@vuldb.com","ASSIGNER":"cna@vuldb.com","STATE":"PUBLIC"},"generator":"vuldb.com","affects":{"vendor":{"vendor_data":[{"vendor_name":"pallidlight","product":{"product_data":[{"product_name":"online-course-selection-system","version":{"version_data":[{"version_value":"n/a"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-707 Improper Neutralization -> CWE-74 Injection -> CWE-79 Cross Site Scripting"}]}]},"description":{"description_data":[{"lang":"eng","value":"A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268."}]},"impact":{"cvss":{"version":"3.1","baseScore":"3.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"}},"references":{"reference_data":[{"url":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW","refsource":"MISC","name":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW"},{"url":"https://vuldb.com/?id.215268","refsource":"MISC","name":"https://vuldb.com/?id.215268"}]}},"nvd":{"publishedDate":"2022-12-11 08:15:00","lastModifiedDate":"2024-02-01 15:30:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.3,"impactScore":2.7}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:pallidlight_online_course_selection_system_project:pallidlight_online_course_selection_system:-:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}