PT-2023-19490
CVE-2023-24233
·
تاريخ النشر
2023-02-10
·
تاريخ التحديث
2025-03-24
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Inventory Management System version v1
Description
A stored cross-site scripting (XSS) issue in the /php-inventory-management-system/orders.php?o=add component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the
Client Name parameter.Recommendations
For Inventory Management System version v1, consider disabling the
Client Name parameter in the /php-inventory-management-system/orders.php?o=add component until a patch is available to prevent exploitation. Restrict access to this component to minimize the risk of arbitrary web script or HTML execution. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾