CVE-2023-23021

6.1 mediumEPSS 0.5%

Medium (6.1) in oretnom23 pos - point of sale system. EPSS 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oretnom23:pos_-_point_of_sale_system

References

https://gist.github.com/enferas/fe381bcc4a020f22cec31cb00e73f43c
https://gist.github.com/enferas/fe381bcc4a020f22cec31cb00e73f43c

Check your stack JSON