PT-2024-11981
CVE-2023-23019
·
تاريخ النشر
2024-05-01
·
تاريخ التحديث
2024-07-03
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
sourcecodester oretnom23 Blog Site version 1.0
Description
The issue is related to a cross site scripting (XSS) vulnerability in the file main.php. This vulnerability can be exploited via the
name and email parameters to the user add function.Recommendations
For sourcecodester oretnom23 Blog Site version 1.0, consider validating and sanitizing the
name and email parameters to prevent XSS attacks. As a temporary workaround, restrict the use of the user add function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾