CVE-2023-5302

Summary

CVE-2023-5302 is a newly disclosed vulnerability affecting the SourceCodester Best Courier Management System 1.0. This issue resides in the Manage Account Page component and is classified as problematic. An attacker can manipulate the First Name argument to execute cross-site scripting (XSS) attacks, potentially gaining unauthorized access to user sessions. Since the exploit has been made public, remote attackers can leverage this vulnerability to launch attacks indiscriminately. The Vulnerability Database has assigned the identifier VDB-240941 to this security weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.