V2Ish1Yan
·
Published
2023-04-05
·
Updated
2024-05-17
·
CVE-2023-1857
3.3
Low
| Base vector | Vector | AV:N/AC:L/Au:M/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
SourceCodester Online Computer and Laptop Store version 1.0
Description:
A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file "/admin/?page=product/manage product&id=2". The manipulation of the `Product Name` argument leads to cross-site scripting. The attack may be launched remotely.
Recommendations:
For version 1.0, consider disabling the functionality related to the "/admin/?page=product/manage product&id=2" file until a patch is available. Restrict access to the `Product Name` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
XSS