CVE-2022-2293

CVE-2022-2293 affects SourceCodester Simple Sales Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown functionality of the file /ci_ssms/index.php/orders/create, caused by manipulating the customer_name parameter. The public exploit is available, and the attack c...

CVE-2023-23026

CVE-2023-23026 is a Cross-Site Scripting (XSS) vulnerability in SourceCodester Oretnom23 Sales Management System 1.0. The issue arises in print.php via the product_name and product_price inputs, allowing an attacker to execute arbitrary code in the context of the victim’s browser. The CVSSv3.1 me...