Vulnerabilities > Stock Management System Project > Stock Management System > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-11-24 CVE-2022-4089 Cross-site Scripting vulnerability in Stock Management System Project Stock Management System
A vulnerability was found in rickxy Stock Management System.
network
low complexity
stock-management-system-project CWE-79
5.4
2022-01-31 CVE-2021-44114 Cross-site Scripting vulnerability in Stock Management System Project Stock Management System 1.0
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function.
network
low complexity
stock-management-system-project CWE-79
4.8
2020-09-09 CVE-2020-24198 Cross-site Scripting vulnerability in Stock Management System Project Stock Management System 1.0
A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'
network
low complexity
stock-management-system-project CWE-79
6.1
2020-09-01 CVE-2020-23831 Cross-site Scripting vulnerability in Stock Management System Project Stock Management System 1.0
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.
network
low complexity
stock-management-system-project CWE-79
6.1