CVE-2022-41445

MEDIUM 4.8CVE-2022-41445 · Published 22/11/2022 · updated 17/06/2026

In short

CVE-2022-41445 is a MEDIUM (CVSS 4.8) vulnerability affecting teacher record management system (teacher record management system project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
teacher record management system teacher_record_management_system_project	`= 1.0`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Subject page.

References

drive.google.com/file/d/18OjJQA2-8-Hdt0HTMwp4aL_Mp_WuffvL/view · Exploit
RashidKhanPathan/CVE-2022-41445 · Exploit
ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cross-site-scripting-in-teachers-record-management-system-using-codeignitor · Broken Link
phpgurukul.com/teachers-record-management-system-using-codeigniter · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free