CVE-2023-36346
38Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 5.3%
from disclosure to weapon10 days
Published on NVDJun 23
1st PoC+10d
exploitation probability
5.3%top 8% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/51549unverifiedcve_referencepacketstormsecurity.com/files/173280/Sales-Of-Cashier-Goods-1.0-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.