CVE-2024-8604
SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 9, 2024
- Updated
- Sep 9, 2024
- Reserved
- Sep 9, 2024
Description
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
- CWE-79 Cross Site Scripting
Affected Products
| Product | Versions |
|---|---|
Online Food Ordering SystemSourceCodester |
|
References
- VDB-276831 | SourceCodester Online Food Ordering System Create an Account Page index.php cross site scriptingvdb-entrytechnical-description
- VDB-276831 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #404660 | SourceCodester Online Food Ordering System v2 2 Cross Site Scriptingthird-party-advisory
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.