CVE-2024-8604: medium-severity vulnerability in SourceCodester Online Food Ordering System
SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
SourceCodester · Online Food Ordering SystemRelated CVEs — SourceCodester Online Food Ordering System
In the same product, most dangerous first.
CVE-2023-0332HIGHSourceCodester Online Food Ordering System manage_user.php sql injectionEPSS 0.9%CVE-2023-0305MEDIUMSourceCodester Online Food Ordering System Login Module admin_class.php sql injectionEPSS 0.6%CVE-2023-0304MEDIUMSourceCodester Online Food Ordering System Signup Module admin_class.php sql injectionEPSS 0.6%CVE-2023-0303MEDIUMSourceCodester Online Food Ordering System view_prod.php sql injectionEPSS 0.6%CVE-2023-1432HIGHSourceCodester Online Food Ordering System POST Request access controlEPSS 0.6%CVE-2026-116604MEDIUMSourceCodester Online Food Ordering System delete_admin.php missing authenticationEPSS 0.6%