| |
Vulnerability CVE-2022-42992
Published: 2022-10-27
| Description: |
Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. |
References: |
http://train.com
http://oretnom23.com
https://github.com/draco1725/POC/blob/main/Exploit/Train%20Scheduler%20App/XSS
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
