Description
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227593 was assigned to this vulnerability.
Metrics
CVSS 3.1 5.4/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Service Provider Management System | 1.0 |
References
- https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227593Permissions Required, Third Party Advisory
- https://vuldb.com/?id.227593Third Party Advisory
- https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227593Permissions Required, Third Party Advisory
- https://vuldb.com/?id.227593Third Party Advisory
Timeline
- Published
- Apr 27, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified