CVE-2023-49540

CVE-2023-49540 affects Book Store Management System v1.0. A cross-site scripting (XSS) flaw is in the /bsms_ci/index.php/history endpoint, exploitable by injecting a payload into the history parameter to run arbitrary scripts/HTML. Reported by multiple sources, the CVSSv3.1 base score is 6.1 (Med...

CVE-2023-49539

Book Store Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the category parameter of /bsms_ci/index.php/category. The root cause is unsanitized input that allows arbitrary web scripts/HTML to be injected and executed in the client. Impact is consistent with XSS...