Vulnerabilities > Online Market Place Site Project > Online Market Place Site > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-26 | CVE-2022-30003 | Cross-site Scripting vulnerability in Online Market Place Site Project Online Market Place Site 1.0 Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields. | 5.4 |
| 2022-06-02 | CVE-2022-29627 | Authorization Bypass Through User-Controlled Key vulnerability in Online Market Place Site Project Online Market Place Site 1.0 An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. | 4.3 |
| 2022-06-02 | CVE-2022-29628 | Cross-site Scripting vulnerability in Online Market Place Site Project Online Market Place Site 1.0 A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter. | 5.4 |