CVE-2022-30015: Simple Food Website Project Simple Food Website

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.

Affected products

• Simple Food Website Project Simple Food Website: version 1.0 only

Published 2022-05-23. Last modified 2026-06-17.