CVE-2022-24582

5.4 mediumEPSS 0.5%

Medium (5.4) in accounting journal management project accounting journal management. EPSS 0.5% chance of exploitation in the next 30 days.

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

accounting_journal_management_project:accounting_journal_management

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Accounting-Journal-Management
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Accounting-Journal-Management

Check your stack JSON