Description
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter.
Medium · 6.1
CVE-2022-43079
EUVD-2022-46128GHSA-wv83-gr92-97gp
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scri…
Published Nov 1, 2022 · Updated May 5, 2025 · Assigned by mitre