CVE-2023-6462: SourceCodester User Registration and Login System delete-user.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246612.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-6462?
CVE-2023-6462 is a vulnerability identified in SourceCodester User Registration and Login System 1.0 that allows for cross site scripting (XSS) attacks through the delete-user.php endpoint.
What is the severity of CVE-2023-6462?
The severity of CVE-2023-6462 is medium, with a severity value of 6.1.
What is the affected software for CVE-2023-6462?
The affected software for CVE-2023-6462 is SourceCodester User Registration and Login System 1.0.
How does CVE-2023-6462 work?
CVE-2023-6462 allows attackers to inject malicious code into the user parameter of the delete-user.php endpoint, leading to cross site scripting attacks.
How can CVE-2023-6462 be mitigated?
To mitigate CVE-2023-6462, it is recommended to sanitize and validate user input to prevent script injection, and apply security patches or updates provided by the software vendor.