CVE-2023-0987

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221680.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Online Pizza Ordering System	1.0

References

https://github.com/1MurasaKi/PizzeXSS_Report/blob/main/Online%20Pizza%20Ordering%20System/README.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.221680Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.221680Permissions Required, Third Party Advisory, VDB Entry
https://github.com/1MurasaKi/PizzeXSS_Report/blob/main/Online%20Pizza%20Ordering%20System/README.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.221680Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.221680Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: Feb 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-09888.8A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects CVE-2023-09895.7An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 p CVE-2023-09926.1The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'Use CVE-2023-09934.3The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, an CVE-2023-09947.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.CVE-2023-09955.4Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.CVE-2023-09967.8There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this throug CVE-2023-09978.8A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some un CVE-2023-09985.3A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part CVE-2023-09998.8A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknow CVE-2023-10006.3A vulnerability was found in cyanomiko dcnnt-py up to 0.9.0. It has been classified as critical. Affected is the function main of the file d CVE-2023-10013.5A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function e