CVE-2023-3381
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jun 23, 2023
Updated: May 17, 2024
CWE ID 89
Summary
CVE-2023-3381 is a recently disclosed vulnerability affecting the SourceCodester Online School Fees System 1.0. Specifically, an unknown functionality in the file /paysystem/datatable.php, which is part of the GET Parameter Handler component, has been identified as the culprit. By manipulating the argument "doj," attackers can execute cross-site scripting attacks, which can be launched remotely. This vulnerability has been made public, increasing the risk of exploitation. The Vulnerability Database has assigned the identifier VDB-232237 to this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.