Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9q6q-6fwh-p665

Опубликовано: 26 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 3.5

Описание

A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 9%
0.00191
Низкий

2 Low

CVSS4

3.5 Low

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.5
nvd
2 месяца назад

A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 9%
0.00191
Низкий

2 Low

CVSS4

3.5 Low

CVSS3

Дефекты

CWE-79