CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

CVE-2023-49539

The Book Store Management System v1.0 contains a cross-site scripting (XSS) vulnerability within the /bsms_ci/index.php/category endpoint. The root cause is the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the cate...