CVE-2023-43292

CVE-2023-43292 is a Cross-Site Scripting vulnerability in the web application "My Food Recipe Using PHP with Source Code" v1.0. Public sources describe that a crafted payload in the Recipe Name, Procedure, or ingredients parameters can allow a local attacker to execute arbitrary code. Multiple bu...

CVE-2025-6345

The CVE-2025-6345 entry concerns a cross‑site scripting (XSS) vulnerability in SourceCodester My Food Recipe 1.0. The issue affects the Add Recipe Page component, specifically the addRecipeModal function in /endpoint/add-recipe.php, where manipulating the Name parameter can trigger XSS. Public ex...