CVE-2023-0258
SourceCodester Online Food Ordering System Category List cross site scripting
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The manipulation of the argument Reason with the input "><script>prompt(1)</script> leads to cross site scripting. The attack may be launched remotely. VDB-218186 is the identifier assigned to this vulnerability.
Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System 2.0. Ha sido calificada como problemática. Una función desconocida del componente Category List Handler es afectada por esta vulnerabilidad. La manipulación del argumento Reason con la entrada "> conduce a cross-site scripting. El ataque puede iniciarse de forma remota. VDB-218186 es el identificador asignado a esta vulnerabilidad.
Eine problematische Schwachstelle wurde in SourceCodester Online Food Ordering System 2.0 ausgemacht. Es geht hierbei um eine nicht näher spezifizierte Funktion der Komponente Category List Handler. Dank Manipulation des Arguments Reason mit der Eingabe "><script>prompt(1)</script> mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-01-12 CVE Reserved
- 2023-01-12 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (0)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Online Food Ordering System Project Search vendor "Online Food Ordering System Project" | Online Food Ordering System Search vendor "Online Food Ordering System Project" for product "Online Food Ordering System" | 2.0 Search vendor "Online Food Ordering System Project" for product "Online Food Ordering System" and version "2.0" | - |
Affected
|