CVE-2023-7075

Summary

CVE-2023-7075 is a newly disclosed vulnerability affecting the code-projects Point of Sales and Inventory Management System 1.0. This issue, identified as VDB-248846, is linked to an unknown functionality of the file /main/checkout.php. The manipulation of the pt argument triggers cross-site scripting (XSS), allowing attackers to inject malicious code into the system. The vulnerability can be exploited remotely, making it a significant risk to organizations using this software. The exploit is publicly known, increasing the likelihood of attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.