CVE:CVE-2022-45008
CNNVD:CNNVD-202212-2630
Sourcecodester Online Leave Management System是一个在线休假管理系统。
Online Leave Management System v1.0版本存在安全漏洞，该漏洞源于组件/leave_system/admin/?page=maintenance/department中包含存储型跨站点脚本（XSS）漏洞。攻击者利用该漏洞通过注入到“Create New”模块下的“Name”字段中的特制载荷来执行任意web脚本或HTML。
solution:Upgrade online_leave_management_system_project online_leave_management_system to a higher version than 1.0,and avoid the version 1.0