What is GHSA-2v6j-q8j6-q6m9?

GHSA-2v6j-q8j6-q6m9 is a security advisory published by GitHub Security Advisories with Medium severity. Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of...

Which CVE IDs does GHSA-2v6j-q8j6-q6m9 cover?

GHSA-2v6j-q8j6-q6m9 covers the following CVE IDs: CVE-2022-29005. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2v6j-q8j6-q6m9?

GHSA-2v6j-q8j6-q6m9 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-2v6j-q8j6-q6m9MediumCVSS 6.1

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2022-29005 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-29005
https://github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txt
http://online.com
https://phpgurukul.com/online-birth-certificate-system-using-php-and-mysql
https://github.com/advisories/GHSA-2v6j-q8j6-q6m9