PoC Index85,100 CVEs with PoCs

CVE-2023-3660

Campcodes Retro Cellphone Online Store add_user_modal.php cross site scripting

MEDIUM 6.1EPSS 0.5%

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add_user_modal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-234014 is the identifier assigned to this vulnerability.

Affected
Campcodes · Retro Cellphone Online Store
CVSS v3.1 NVD
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1 VULDB
2.4 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v2.0 VULDB
3.3 LOWAV:N/AC:L/Au:M/C:N/I:P/A:N
EPSS
0.52% chance of exploitation in the next 30 days, 43rd percentile
Published
2023-07-13
Updated
2024-10-23

Proof-of-concept exploits (1)

Security advisories

References