Vulnerabilities > Phpgurukul > Online Birth Certificate System > 1.2

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-23	CVE-2022-29005	Cross-site Scripting vulnerability in PHPgurukul Online Birth Certificate System 1.2 Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters. network low complexity phpgurukul CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.