medium5.4
CVE-2022-24582
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking.
Impact
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accounting Journal Management Project | Accounting Journal Management | Version 1.0 |