Lucene search
+L

13 matches found

NVD
NVD
•added 2026/08/30 6:17 p.m.•14 views

CVE-2026-82554

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/30 5:15 p.m.•14 views

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/30 5:15 p.m.•16 views

EUVD-2026-68276

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS4.6AI score0.0047EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/30 5:15 p.m.•37 views

CVE-2026-82554

SourceCodester Queue Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /api/add_customer.php . Manipulating the Name parameter allows a remote, unauthenticated attacker to inject script, requiring user interaction to trigger. The impact is rated MEDIUM (C...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/30 5:15 p.m.•46 views

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS0.0047EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•3 views

CVE-2026-82554: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS3.9AI score0.0047EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/30 4:16 p.m.•20 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS0.0031EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•3 views

CVE-2026-30558: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.0031EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•3 views

CVE-2025-63447: Improper Neutralization of Input During Web Page Generation

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS5.7AI score0.00297EPSS
SaveExploits1References1
NVD
NVD
•added 2023/07/28 7:15 a.m.•32 views

CVE-2023-3989

A vulnerability was found in SourceCodester Jewelry Store System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file addcustomer.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-235610 is the identifi...

6.1CVSS4.4AI score0.00619EPSS
SaveExploits1References3
Prion
Prion
•added 2023/07/28 7:15 a.m.•28 views

Cross site scripting

A vulnerability was found in SourceCodester Jewelry Store System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file addcustomer.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-235610 is the identifi...

4CVSS6AI score0.00619EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/28 12:00 a.m.•3 views

CVE-2023-3989: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Jewelry Store System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file addcustomer.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-235610 is the identifi...

6.1CVSS3.6AI score0.00619EPSS
SaveExploits1References2
Rows per page
Query Builder