CVE-2023-0258: SourceCodester Online Food Ordering System Category List cross site scripting
Published Jan 12, 2023
·Updated
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The manipulation of the argument Reason with the input "><script>prompt(1)</script> leads to cross site scripting. The attack may be launched remotely. VDB-218186 is the identifier assigned to this vulnerability.
Affected Software
2 affected components
Online Food Ordering System Project Online Food Ordering System=2.0
oretnom23 Online Food Ordering System=2.0
Event History
Jan 12, 2023
CVE Published
09:20 PM
Data Sourced
09:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-0258.
2
What is the severity of CVE-2023-0258?
The severity of CVE-2023-0258 is medium.
3
What is the affected software?
The affected software is SourceCodester Online Food Ordering System version 2.0.
4
What is the CWE reference for CVE-2023-0258?
The CWE reference for CVE-2023-0258 is CWE-79.
5
How can I fix CVE-2023-0258?
To fix CVE-2023-0258, apply the latest security patch or update provided by the software vendor.