CVE-2023-2372

CWE-79 — Cross-site Scripting (XSS)CWE-12884 documents4 sources

Severity

4.8MEDIUM

EPSS

0.1%

top 77.39%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Online DJ Management System Online DJ Management System Project Online DJ Management System

Timeline

PublishedApr 28

Latest updateOct 4

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=save_event. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227648.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/online_dj_management_system1.0

▶NVDonline_dj_management_system_project/online_dj_management_system1.0

🔴Vulnerability Details

CVEList

SourceCodester Online DJ Management System cross site scripting↗2023-04-28

▶

GHSA

GHSA-wvx6-4fjc-w3r7: A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1↗2023-04-28

▶

📋Vendor Advisories

Red Hat

kernel: null_blk: Always check queue mode setting from configfs↗2025-10-04

▶