Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07973
HistoryFeb 08, 2023 - 12:00 a.m.

Online Food Ordering System signup.php Cross-Site Scripting Vulnerability

2023-02-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
cross-site scripting
online food ordering
vulnerability
user-supplied data
redirect parameter
attackers

0.001 Low

EPSS

Percentile

32.4%

A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the redirect parameter of the signup.php page, which can be exploited by attackers to cause cross-site scripting attacks.

0.001 Low

EPSS

Percentile

32.4%

Related for CNVD-2023-07973