Cross Site Scripting Vulnerability in SourceCodester Oretnom23 POS System
CVE-2023-23021

6.1MEDIUM

Key Information:

Vendor

SourceCodester
Status
Pos - Point Of Sale System
Vendor
CVE Published:
1 May 2024

What is CVE-2023-23021?

The vulnerability permits attackers to exploit the Oretnom23 POS system by injecting malicious scripts through unvalidated input fields such as code, name, and description located in Main.php. This Cross Site Scripting flaw poses significant risks, enabling unauthorized actions and potential data breaches, compromising both user security and data integrity. Ensuring proper input validation and sanitization is crucial to mitigate this risk and protect sensitive information.

References

https://gist.github.com/enferas/fe381bcc4a020f22cec31cb00...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-23021 : Cross Site Scripting Vulnerability in SourceCodester Oretnom23 POS System