CVE-2023-2350

LOW

SourceCodester Service Provider Management System 1.0 - XSS

Title source: llm

Description

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227593 was assigned to this vulnerability.

References (3)

Core 3

Core References

Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.227593

Permissions Required, Third Party Advisory signature permissions-required

https://vuldb.com/?ctiid.227593

Exploit, Third Party Advisory exploit

https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdf

View Exploit ZIP pw:eip

Scores

CVSS v3 3.5

EPSS 0.0025

EPSS Percentile 48.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

oretnom23/service_provider_management_system 1.0

Published Apr 27, 2023

Tracked Since Feb 18, 2026