How severe is CVE-2022-4554?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Id Software Project And Consultancy Services B2b Customer Ordering System

CVE-2022-4554

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Id Software Project And Consultancy Services B2b Customer Ordering System — versions 1.0.0.347
Idyazilim B2b_dealer_order_system

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

iletisim@usom.gov.tr (Third Party Advisory, government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2022-4554?: CVE-2022-4554 is a medium-severity vulnerability in Id Software Project And Consultancy Services B2b Customer Ordering System, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2023-01-24.
How severe is CVE-2022-4554?: Medium severity. CVSS v3 base score is 5.4 out of 10.