Cross site scripting

2023-05-1114:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sourcecodester

online store

remote attack

cross site scripting

products.php

search manipulation

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228799.

CPENameOperatorVersion
online_computer_and_laptop_storeeq1.0

CPE	Name	Operator	Version
	online_computer_and_laptop_store	eq	1.0

References

github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md

vuldb.com/?ctiid.228799

vuldb.com/?id.228799