Lucene search

K
nvd[email protected]NVD:CVE-2023-37150
HistoryJul 10, 2023 - 4:15 p.m.

CVE-2023-37150

2023-07-1016:15:53
CWE-79
web.nvd.nist.gov
3
sourcecodester
online pizza
xss
categories
vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.6%

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in “/admin/index.php?page=categories” Category item.

Affected configurations

Nvd
Node
online_pizza_ordering_system_projectonline_pizza_ordering_systemMatch1.0
VendorProductVersionCPE
online_pizza_ordering_system_projectonline_pizza_ordering_system1.0cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.6%

Related for NVD:CVE-2023-37150