Cross-Site Scripting Vulnerability in Online Food Ordering System by Xiumulty
CVE-2023-24191

6.1MEDIUM

Key Information:

Vendor: Online Food Ordering System Project
Status: Online Food Ordering System
Vendor: CVE Published:; 6 February 2023

🔔 Create Online Food Ordering System Project Vulnerability Alert

What is CVE-2023-24191?

An identified security flaw in version 2 of the Online Food Ordering System allows for cross-site scripting via an unvalidated redirect parameter in signup.php. This vulnerability can be exploited to inject malicious scripts, potentially compromising user data and session information. Proper validation and sanitization of input parameters can mitigate the risk associated with this vulnerability.

References

https://www.sourcecodester.com/php/16022/online-food-orde...

https://github.com/xiumulty/CVE/blob/main/Online%20Food%2...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 6, 2023
Vulnerability Reserved
Jan 23, 2023

CVE-2023-24191 Data

JSON