CVE-2022-2293

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Sales Management System version 1.0

Description A problematic issue was found in the system, affecting an unknown functionality of the file /ci ssms/index.php/orders/create. The manipulation of the customer name argument with the input <script>alert("XSS")</script> leads to cross-site scripting. The attack can be launched remotely.

Recommendations For version 1.0, consider restricting the input for the customer name argument in the /ci ssms/index.php/orders/create file to prevent cross-site scripting attacks. As a temporary workaround, consider validating and sanitizing all user input to minimize the risk of exploitation.