Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-7124
HistoryDec 28, 2023 - 3:15 a.m.

Cross site scripting

2023-12-2803:15:00
PRIOn knowledge base
www.prio-n.com
7
code-projects
e-commerce site
search.php
cross site scripting
remote attack
exploit
vdb-249096
nvd

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096.

CPENameOperatorVersion
e-commerce_siteeq1.0

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

Related for PRION:CVE-2023-7124