CVE-2023-1689

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.2%
top 58.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Earnings AND Expense Tracker APPEarnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP
Timeline
PublishedMar 29

Description

A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224308.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-259p-4x9p-wc8m: A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1↗2023-03-29
▶
CVEList
SourceCodester Earnings and Expense Tracker App cross site scripting↗2023-03-29
▶
CVE-2023-1689 (MEDIUM CVSS 6.1) | A vulnerability classified as probl | cvebase.io