Description
Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - "Categories".
Unscored
CVE-2020-35309
EUVD-2020-22985GHSA-m7m8-2937-xxpq
Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbi…
Published Jan 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre