{"affected":[{"affectedData":[{"product":"online-course-selection-system","vendor":"pallidlight","versions":[{"status":"affected","version":"n/a"}]}],"source":"cna@vuldb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:pallidlight_online_course_selection_system_project:pallidlight_online_course_selection_system:-:*:*:*:*:*:*:*","matchCriteriaId":"B3F190E5-0947-4761-B3CD-AB99E3232157","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268."},{"lang":"es","value":"Se encontró una vulnerabilidad en el sistema de selección de cursos en línea pallidlight. Ha sido clasificada como problemática. Una función desconocida es afectada por esta función. La manipulación conduce a Cross-Site Scripting (XSS). Es posible lanzar el ataque de forma remota. El identificador de esta vulnerabilidad es VDB-215268."}],"id":"CVE-2022-4401","lastModified":"2026-06-17T05:20:47.880","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.1,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4401","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-15T17:09:16.135675Z","version":"2.0.3"}}]},"published":"2022-12-11T08:15:09.797","references":[{"source":"cna@vuldb.com","tags":["Exploit","Issue Tracking","Third Party Advisory"],"url":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW"},{"source":"cna@vuldb.com","tags":["Third Party Advisory"],"url":"https://vuldb.com/?id.215268"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"],"url":"https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://vuldb.com/?id.215268"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-707"}],"source":"cna@vuldb.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}