CVE-2023-1275
LOWPhone Shop Sales Managements System 1.0 - Cross-Site Scripting in CAPTCHA Handler
Title source: llmDescription
A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222598 is the identifier assigned to this vulnerability.
References (3)
Core 3
Core References
Third Party Advisory vdb-entry
technical-description
https://vuldb.com/?id.222598
Third Party Advisory signature
permissions-required
https://vuldb.com/?ctiid.222598
Scores
CVSS v3
3.5
EPSS
0.0056
EPSS Percentile
42.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
phone_shop_sales_managements_system_project/phone_shop_sales_managements_system
1.0
Published
Mar 08, 2023
Tracked Since
Feb 18, 2026