CVE-2023-1690

CWE-79 — Cross-site Scripting (XSS)5 documents4 sources

Severity

6.1MEDIUM

EPSS

0.2%

top 58.55%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Earnings AND Expense Tracker APP Earnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP

Timeline

PublishedMar 29

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-224309 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/earnings_and_expense_tracker_app1.0

▶NVDearnings_and_expense_tracker_app_project/earnings_and_expense_tracker_app1.0

🔴Vulnerability Details

GHSA

GHSA-vp77-7r82-hp2q: A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1↗2023-03-29

▶

CVEList

SourceCodester Earnings and Expense Tracker App cross site scripting↗2023-03-29

▶