CVE-2023-0945

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

0.2%

top 58.55%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Best POS Management System Best POS Management System Project Best POS Management System

Timeline

PublishedFeb 21

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input "> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/best_pos_management_system1.0

▶NVDbest_pos_management_system_project/best_pos_management_system1.0

🔴Vulnerability Details

GHSA

GHSA-j5rf-jfvv-2w7f: A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1↗2023-02-21

▶

CVEList

SourceCodester Best POS Management System cross site scripting↗2023-02-21

▶