Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-2293 EUVD-2022-34566GHSA-8phj-3xc4-frq8

SourceCodester Simple Sales Management System create cross site scripting

Published Jul 12, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ci_ssms/index.php/orders/create. The manipulation of the argument customer_name with the input <script>alert("XSS")</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
SourceCodester Simple Sales Management System 1.0 —

References