Vulnerability · Published Sep 9, 2024 · Assigned by VulDB
CVE-2024-8604SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting
Medium 4.3
In plain English
A medium-severity cross-site scripting in Online Food Ordering System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.6%top 52.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Food Ordering System | 2.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- VDB-276831 | SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting vdb-entry, technical-description
- VDB-276831 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #404660 | SourceCodester Online Food Ordering System v2 2 Cross Site Scripting third-party-advisory
- https://www.sourcecodester.com/ product