CVE-2023-23024

CVE-2023-23024 affects Book Store Management System v1.0. A cross-site scripting (XSS) flaw exists in the /bsms_ci/index.php/book endpoint, where an attacker can inject a crafted payload into the writer parameter to execute arbitrary web scripts or HTML. The vulnerability’s impact is limited to c...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...