CVE-2023-2397
SourceCodester Simple Mobile Comparison Website cross site scripting
MEDIUM 4.8EPSS 0.6%
A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_field. The manipulation of the argument Field Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227675.
- Affected
- SourceCodester · Simple Mobile Comparison Website
- CVSS v3.1 NVD
- 4.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - CVSS v3.1 VULDB
- 2.4 LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N - CVSS v2.0 VULDB
- 3.3 LOW
AV:N/AC:L/Au:M/C:N/I:P/A:N - EPSS
- 0.58% chance of exploitation in the next 30 days, 46th percentile
- Published
- 2023-04-28
- Updated
- 2024-08-02
Proof-of-concept exploits (1)
- sunyucheng0405/bug_report/blob/main/XSS-1.md1★ · 2023-04-28