CVE-2023-2100

Name of the Vulnerable Software and Affected Versions SourceCodester Vehicle Service Management System version 1.0

Description A problematic vulnerability was found in the SourceCodester Vehicle Service Management System. This issue affects the file /admin/report/index.php and is triggered by the manipulation of the date end argument, leading to cross-site scripting. The attack can be initiated remotely.

Recommendations For version 1.0, consider disabling access to the /admin/report/index.php file until a patch is available. As a temporary workaround, avoid using the date end argument in the affected file to minimize the risk of exploitation.