CVE-2022-40348: Intern Record System Project Intern Record System

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code.

Affected products

• Intern Record System Project Intern Record System: version 1.0 only

Published 2023-02-18. Last modified 2026-06-17.