CVE-2023-0966: SourceCodester Online Eyewear Shop cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221635.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-0966.
What is the severity level of CVE-2023-0966?
The severity level of CVE-2023-0966 is high with a value of 8.8.
What is the affected software?
The affected software is Online Eyewear Shop Project Online Eyewear Shop version 1.0.
What is cross-site scripting (XSS) vulnerability?
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
How can the cross-site scripting (XSS) vulnerability be exploited?
The cross-site scripting (XSS) vulnerability in SourceCodester Online Eyewear Shop can be exploited by manipulating the 'id' argument in the admin/?page=orders/view_order to inject and execute malicious scripts remotely.