Cross-site Scripting Vulnerability in Sourcecodester Online Pizza Ordering System
CVE-2023-37150

6.1MEDIUM

Key Information:

Vendor: Online Pizza Ordering System Project
Status: Online Pizza Ordering System
Vendor: CVE Published:; 10 July 2023

🔔 Create Online Pizza Ordering System Project Vulnerability Alert

What is CVE-2023-37150?

The Sourcecodester Online Pizza Ordering System v1.0 contains a Cross-site Scripting (XSS) vulnerability located in the '/admin/index.php?page=categories' page. This flaw may allow an attacker to inject malicious scripts into the web application, potentially leading to unauthorized access or manipulation of sensitive data by exploiting users who access vulnerable pages.

References

https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/bl...

https://www.chtsecurity.com/news/57fd2fe6-11d9-421d-9087-...

https://www.chtsecurity.com/news/c27389f3-a70b-4a71-952a-...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 10, 2023
Vulnerability Reserved
Jun 28, 2023

CVE-2023-37150 Data

JSON