- Description
- A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- online_pizza_delivery_system
CVSS 3.1
- Type
- Secondary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-79
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:online_pizza_delivery_system_project:online_pizza_delivery_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DC6A115E-B779-4322-ABE0-6FC7C0F7D26E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]