CVE-2023-49539

MEDIUM 6.1CVE-2023-49539 · Published 01/03/2024 · updated 17/06/2026

In short

CVE-2023-49539 is a MEDIUM (CVSS 6.1) vulnerability affecting book store management system (oretnom23).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
book store management system oretnom23	`= 1.0`	No fix yet

Description

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter.

References

geraldoalcantara/CVE-2023-49539 · Exploit
owasp.org/Top10/A03_2021-Injection · Not Applicable
owasp.org/www-community/attacks/xss · Not Applicable
sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.html · Product

More vulnerabilities in book store management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free