Hujianjie

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Pet Shop We App version 1.0 **Description** A vulnerability has been found in the SourceCodester Online Pet Shop We App, affecting the file /pet shop/admin/orders/update status.php. The manipulation of the `oid` argument with a malicious input, such as `1"><script>alert(1111)</script>`, leads to cross-site scripting. The attack can be initiated remotely. **Recommendations** For SourceCodester Online Pet Shop We App version 1.0, consider disabling the `update status.php` file in the `/pet shop/admin/orders/` directory until a patch is available. Restrict access to the `oid` argument in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.