CVE-2023-1395: low-severity vulnerability in SourceCodester Yoga Class Registration System
SourceCodester Yoga Class Registration System list.php query cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.6%
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Yoga Class Registration SystemRelated CVEs — SourceCodester Yoga Class Registration System
In the same product, most dangerous first.
CVE-2023-1366MEDIUMSourceCodester Yoga Class Registration System manage_category.php query sql injectionEPSS 0.7%CVE-2024-7851MEDIUMSourceCodester Yoga Class Registration System Add User Users.php improper authorizationEPSS 0.6%CVE-2024-7853MEDIUMSourceCodester Yoga Class Registration System sql injectionEPSS 0.6%CVE-2023-0982MEDIUMSourceCodester Yoga Class Registration System Add Class Entry sql injectionEPSS 0.5%CVE-2023-0981MEDIUMSourceCodester Yoga Class Registration System Delete User sql injectionEPSS 0.5%CVE-2023-0980MEDIUMSourceCodester Yoga Class Registration System Status Update update_status.php sql injectionEPSS 0.5%