CVE-2022-3546
SourceCodester Simple Cold Storage Management System Create User cross site scripting
- Published
- Oct 17, 2022
- Updated
- Aug 3, 2024
- Assigning CNA
- VulDB
- Evidence observed
- Aug 5, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NLow · next 30 days
- Percentile
- 53.5%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-211046 is the identifier assigned to this vulnerability.
Sources
Proof-of-concept exploit for CVE-2022-3546, a stored XSS vulnerability in SourceCodester Simple Cold Storage Management System 1.0 via the Create User handler.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.