PT-2024-11981

CVE-2023-23019

·

Published

2024-05-01

·

Updated

2024-07-03

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions sourcecodester oretnom23 Blog Site version 1.0
Description The issue is related to a cross site scripting (XSS) vulnerability in the file main.php. This vulnerability can be exploited via the name and email parameters to the user add function.
Recommendations For sourcecodester oretnom23 Blog Site version 1.0, consider validating and sanitizing the name and email parameters to prevent XSS attacks. As a temporary workaround, restrict the use of the user add function until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾