First published: Wed Mar 22 2023(Updated: )
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input <script>alert('1')</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
E-commerce System Project E-commerce System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-1569 is a vulnerability found in SourceCodester E-Commerce System 1.0, which allows cross-site scripting attacks.
The severity of CVE-2023-1569 is medium, with a CVSS score of 5.4.
SourceCodester E-Commerce System 1.0 is affected by CVE-2023-1569.
CVE-2023-1569 can be exploited by manipulating the argument U_NAME with malicious input, such as <script>alert('1')</script>.
Yes, you can find more information about CVE-2023-1569 at the following links: [Link 1](https://vuldb.com/?id.223561), [Link 2](https://vuldb.com/?ctiid.223561).