CVE-2023-0571

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file createcustomer.php of the component Add Customer. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219730 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Canteen Management System	1.0

References

https://github.com/ctflearner/Vulnerability/blob/main/Canteen%20Management%20System/Canteen_Management_System_XSS_IN_Add_Customer.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.219730Third Party Advisory
https://vuldb.com/?id.219730Permissions Required
https://github.com/ctflearner/Vulnerability/blob/main/Canteen%20Management%20System/Canteen_Management_System_XSS_IN_Add_Customer.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.219730Third Party Advisory
https://vuldb.com/?id.219730Permissions Required

Timeline

Published: Jan 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-05725.3Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.CVE-2023-05749.8Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of CVE-2023-05759.8External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte CVE-2023-05776.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies SOBIAD a CVE-2023-05786.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies Book Cit CVE-2023-05798.8The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s,CVE-2023-05809.8Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited CVE-2023-05815.3The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up CVE-2023-05829.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authoriza CVE-2023-05834.3The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'update_vk_blocks_options' function in versions up t CVE-2023-05844.3The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'update_options' function in versions up to, and inc CVE-2023-05854.8The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and inc