First published: Thu Apr 27 2023(Updated: )
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227593 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oretnom23 Service Provider Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-2350 is medium.
The affected software of CVE-2023-2350 is Oretnom23 Service Provider Management System 1.0.
The CWE of CVE-2023-2350 is 79 (Cross-Site Scripting).
The cross-site scripting vulnerability in CVE-2023-2350 can be exploited by manipulating the id argument.
Yes, you can find references for CVE-2023-2350 at the following links: [Reference 1](https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdf), [Reference 2](https://vuldb.com/?ctiid.227593), [Reference 3](https://vuldb.com/?id.227593)