CVE-2023-7160

Summary

CVE-2023-7160 is a newly disclosed vulnerability affecting the SourceCodester Engineers Online Portal 1.0. This issue, identified as VDB-249182, is considered problematic and impacts the Add Engineer Handler component's unknown functionality. Attackers can exploit this cross-site scripting (XSS) vulnerability by manipulating the first name/last name input with <script>alert(0)</script>. The exploit allows remote attacks, making it a significant concern. The vulnerability details have been made public, increasing the risk of potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.