SourceCodester Online Eyewear Shop
cpe:2.3:a:online_eyewear_shop_project:online_eyewear_shop:*:*:*:*:*:*:*
- 1.0
A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Online Eyewear Shop version 1.0. The issue arises in the file '/classes/Master.php?f=save_product', where the 'brand' parameter can be manipulated to inject malicious scripts. This vulnerability can be exploited remotely and requires user interaction.
Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.