Vulnerability Description
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Book Store Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/geraldoalcantara/CVE-2023-49540ExploitThird Party Advisory
- https://owasp.org/Top10/A03_2021-Injection/Not Applicable
- https://owasp.org/www-community/attacks/xss/Not Applicable
- https://www.sourcecodester.com/php/15748/book-store-management-system-project-usProduct
- https://github.com/geraldoalcantara/CVE-2023-49540ExploitThird Party Advisory
- https://owasp.org/Top10/A03_2021-Injection/Not Applicable
- https://owasp.org/www-community/attacks/xss/Not Applicable
- https://www.sourcecodester.com/php/15748/book-store-management-system-project-usProduct
FAQ
What is CVE-2023-49540?
CVE-2023-49540 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history. This vulnerability allows attackers to execute arbitrary web scrip...
How severe is CVE-2023-49540?
CVE-2023-49540 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-49540?
Check the references section above for vendor advisories and patch information. Affected products include: Oretnom23 Book Store Management System.