CVE-2023-2691

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

CVE-2023-2691

SourceCodester Personnel Property Equipment System 1.0 is affected by a cross-site scripting vulnerability in the POST Parameter Handler (admin/add_item.php) where the item_name parameter can be manipulated to inject scripts. Exploitation is possible remotely, and public disclosures exist. Connec...