VULNERABILITY INTELLIGENCE

CVE-2024-57326

CVSS score6.1 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references