CVE-2024-57326

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0

Medium · published January 23, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Published
2025-01-23T00:00Z
EPSS history
Timeline
  • 23 JAN 00:00Z
    A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0
    cvelistv5