CVE-2023-0945: SourceCodester Best POS Management System cross site scripting

Published Feb 21, 2023

Updated

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input "><img src=x onerror=prompt(document.domain);> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.

Affected Software

2 affected components

Best Pos Management System Project Best Pos Management System=1.0

Mayurik Best Pos Management System=1.0

Event History

Feb 21, 2023

CVE Published

08:01 PM

Data Sourced

08:01 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-0945?

CVE-2023-0945 is classified as a problematic vulnerability in the Best POS Management System.

How do I fix CVE-2023-0945?

To fix CVE-2023-0945, validate and sanitize user inputs to prevent script injections in the add-category functionality.

What systems are affected by CVE-2023-0945?

CVE-2023-0945 affects version 1.0 of the Best POS Management System.

What kind of attack can result from CVE-2023-0945?

CVE-2023-0945 may allow attackers to execute JavaScript in the context of a user's session through cross-site scripting (XSS).

What file is associated with CVE-2023-0945?

CVE-2023-0945 is associated with the file index.php, specifically the add-category page.