CVE-2023-0732 — Cross-site Scripting in Online Eyewear Shop

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
CNA3.5
EPSS
0.2%
top 58.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Online Eyewear ShopOretnom23 Online Eyewear Shop
Timeline
PublishedFeb 7

Description

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument firstname/middlename/lastname/email/contact leads to cross site scripting. The attack can be launched remotely. The identifier VDB-220369 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-35hp-p589-4cwf: A vulnerability has been found in SourceCodester Online Eyewear Shop 1↗2023-02-07
▶
CVEList
SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting↗2023-02-07
▶
CVE-2023-0732 — Cross-site Scripting | cvebase