leads to cross ","datePublished":"2023-02-26T13:15:10.433","dateModified":"2026-06-17T05:26:58.143","about":{"@type":"Thing","name":"online_pet_shop_we_app_project online_pet_shop_we_app"}}
cvedb.io
CVE-2023-1042
LOW · CVSS 3.5
EPSS exploitation probability: 0%
Published 2023-02-26T13:15:10.433 · Last modified 2026-06-17T05:26:58.143

Summary

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800.

Affected products

online_pet_shop_we_app_project — online_pet_shop_we_app

Does this affect you?

Add your gear to cvedb and we'll alert you only when online_pet_shop_we_app_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.