CVE-2022-3503 — SourceCodester Purchase Order Management System Supplier cross site scripting

Description (CNA)

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210832.

Affected (CNA)

Vendor / product	Versions
SourceCodester / Purchase Order Management System	affected 1.0

CWE

CWE-707

References

https://github.com/DisguisedRoot/Exploit/blob/main/Persistent%20XSS/PoC
https://vuldb.com/?id.210832

ADP enrichment

CVE

No English description supplied.

https://github.com/DisguisedRoot/Exploit/blob/main/Persistent%20XSS/PoC
https://vuldb.com/?id.210832

CISA-ADP

No English description supplied.

No references supplied.