CVE-2023-6463: SourceCodester User Registration and Login System add-user.php cross site scripting
A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246613 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-6463?
CVE-2023-6463 is a vulnerability found in SourceCodester User Registration and Login System 1.0 that allows for cross-site scripting (XSS) attacks.
How does CVE-2023-6463 affect SourceCodester User Registration and Login System 1.0?
CVE-2023-6463 affects the add-user.php functionality in SourceCodester User Registration and Login System 1.0, allowing for cross-site scripting attacks when manipulating the 'first_name' parameter.
What is the severity of CVE-2023-6463?
The severity of CVE-2023-6463 is medium with a CVSS score of 5.4.
How can I fix CVE-2023-6463 in SourceCodester User Registration and Login System 1.0?
To fix CVE-2023-6463, it is recommended to update to a patched version of SourceCodester User Registration and Login System.
What is the Common Weakness Enumeration (CWE) for CVE-2023-6463?
The Common Weakness Enumeration (CWE) for CVE-2023-6463 is CWE-79, which is for Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').