Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-2153 EUVD-2023-33671GHSA-q7p4-2g5v-f3fx

SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting

Published Apr 18, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php of the component POST Parameter Handler. The manipulation of the argument value with the input 1><script>alert(666)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226274 is the identifier assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
SourceCodester Complaint Management System 1.0 —

References