VulnerabilityAnalyzed
CVE-2023-24203
Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameter(s).
MEDIUM 5.4EPSS 0.61%
Does this matter?
Lower severity and a low EPSS score (0.61%). Track it; it rarely justifies an emergency change on its own.
Description
Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameter(s).
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.61% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- oretnom23/simple customer relationship management system
- Source
- cve@mitre.org
References
- https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204Exploit, Third Party Advisory
- https://momonguyen.com/2023/cve-2023-24203/URL Repurposed
- https://www.sourcecodester.comProduct
- https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204Exploit, Third Party Advisory
- https://momonguyen.com/2023/cve-2023-24203/URL Repurposed
- https://www.sourcecodester.comProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.