CVE-2024-57326

MEDIUM

Online Pizza Delivery System 1.0 - Reflected Cross-Site Scripting via Search Parameter

Title source: llm

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57326

View Exploit ZIP pw:eip

Scores

CVSS v3 6.1

EPSS 0.0027

EPSS Percentile 18.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (1)

online_pizza_delivery_system_project/online_pizza_delivery_system 1.0

Published Jan 23, 2025

Tracked Since Feb 18, 2026