Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-9921

Опубликовано: 03 сент. 2025
Источник: nvd
CVSS3: 2.4
CVSS3: 5.4
CVSS2: 3.3
EPSS Низкий

Описание

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:code-projects:pos_pharmacy_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.00031
Низкий

2.4 Low

CVSS3

5.4 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
github
около 1 месяца назад

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 8%
0.00031
Низкий

2.4 Low

CVSS3

5.4 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79