CVE-2023-2153: SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting

Published Apr 18, 2023

Updated

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The manipulation of the argument value with the input 1><script>alert(666)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226274 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Complaint Management System Project Complaint Management System=1.0

Event History

Apr 18, 2023

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-2153?

CVE-2023-2153 is classified as a problematic vulnerability.

How do I fix CVE-2023-2153?

To fix CVE-2023-2153, ensure that you apply security patches provided by the vendor for Complaint Management System version 1.0.

What component is affected by CVE-2023-2153?

CVE-2023-2153 affects the editable_ajax.php file within the admin/assets/plugins/DataTables/examples directory.

Who is affected by CVE-2023-2153?

Users of SourceCodester Complaint Management System version 1.0 are affected by CVE-2023-2153.

What type of vulnerability is CVE-2023-2153?

CVE-2023-2153 is categorized as a security vulnerability related to improper handling of POST parameters.