CVE-2023-5273

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

0.1%

top 78.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Best Courier Management System Mayurik Best Courier Management System

Timeline

PublishedSep 29

Description

A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0. This vulnerability affects unknown code of the file manage_parcel_status.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-240886 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/best_courier_management_system1.0

▶NVDmayurik/best_courier_management_system1.0

🔴Vulnerability Details

CVEList

SourceCodester Best Courier Management System manage_parcel_status.php cross site scripting↗2023-09-29

▶

GHSA

GHSA-mf5g-9rr3-93fg: A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1↗2023-09-29

▶