CVE-2023-37150

MediumCVSS 6.1

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

41th percentile - higher than 41% of all known CVEs

Summary

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in '/admin/index.php?page=categories' Category item.

Risk Assessment

Exploitation of this vulnerability may lead to session data theft or injection of malicious code, posing a threat to the application's security and its users.

Recommendation

It is recommended to implement input validation and sanitization to minimize the risk of XSS attacks.

Original NVD description (English source)

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in "/admin/index.php?page=categories" Category item.