CVE-2023-0732 - SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting

Back Back to CVE browser

MEDIUM

SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting

Published Feb 7, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument firstname/middlename/lastname/email/contact leads to cross site scripting. The attack can be launched remotely. The identifier VDB-220369 was assigned to this vulnerability.

Affected products

Vendor SourceCodester Product Online Eyewear Shop Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Online Eyewear Shop

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://vuldb.com/?ctiid.220369
signaturePermissions RequiredThird Party Advisory
https://vuldb.com/?id.220369
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://vuldb.com/?ctiid.220369		signaturePermissions RequiredThird Party Advisory
https://vuldb.com/?id.220369		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory