Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09302
HistoryFeb 09, 2022 - 12:00 a.m.

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi跨站脚本漏洞

2022-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

39.0%

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is vulnerable to a cross-site scripting vulnerability that originates in the category/index.php add function in the Category parameter of category/index.php. An attacker could exploit this vulnerability to insert malicious code.

0.001 Low

EPSS

Percentile

39.0%

Related for CNVD-2022-09302