CVE-2022-39054: Cowell Enterprise Travel Management System Project Cowell Enterprise Travel Management System

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

Affected products

• Cowell Enterprise Travel Management System Project Cowell Enterprise Travel Management System: affected versions not specified

Published 2022-09-28. Last modified 2026-06-17.