CVE Catalog
CVE-2023-36346
MediumCVSS 6.1Exploitation Probability (EPSS)
High risk3.36%
87th percentile - higher than 87% of all known CVEs
Summary
Version 2.0 of POS Codekop was found to contain a reflected XSS vulnerability via the nm_member parameter in print.php.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update the POS Codekop system to the latest version and to validate and sanitize input data in the application.
Original NVD description (English source)
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php.