CVE-2023-3017

LOW

SourceCodester Lost and Found Information System 1.0 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manage_user of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230361 was assigned to this vulnerability.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.230361
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.230361

Scores

CVSS v3 2.4
EPSS 0.0009
EPSS Percentile 26.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-80
Status published
Products (1)
oretnom23/lost_and_found_information_system 1.0
Published May 31, 2023
Tracked Since Feb 18, 2026