SourceCodester Best POS Management System cross site scripting
CVE-2023-0945

5.4MEDIUM

Key Information:

Vendor
SourceCodester
Status
Best POS Management System
Vendor
CVE Published:
21 February 2023

Summary

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input "> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.

Affected Version(s)

Best POS Management System 1.0

References

https://vuldb.com/?id.221592
vdb-entrytechnical-description
https://vuldb.com/?ctiid.221592
signature

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

mroz1l (VulDB User)
.