Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-1817 EUVD-2022-25093GHSA-2g47-r557-h83r

Badminton Center Management System Userlist Module cross site scripting

Published May 23, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.

Affected products

VendorProductAffectedFixed
— Badminton Center Management System — —

References