packetstormsecurity.com
http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html CVE-2023-29848
MEDIUM
Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
Record summary
CVE-2023-29848 has a selected CVSS score of 4.8 (medium); EIP currently links 1 catalogued exploit.
Description
Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php Add New Menu function.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBBang Resto v1.0 - Stored Cross-Site Scripting (XSS)ExploitDB exploitby Rahad ChowdhuryNot analyzed1 file
References
3github.com
https://github.com/mesinkasir/bangresto/issues/2 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-29848