CVE-2020-23831 - CVE House
Back to Database
Status published Medium CVE-2020-23831

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal...

Vulnerability Description

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-23831

Credits & Attribution

No credits recorded in the NVD database.

References

More from stock management system project

View All →
CVE-2021-44114
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management...
Medium 4.8
CVE-2020-24198
A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System...
Medium 6.1
CVE-2020-24197
A SQL injection vulnerability in the login component in Stock...
Critical 9.8
CVE-2020-23830
A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester...
High 7.1

Affected Vendor

stock management system project

View all reports →

Affected Software

stock management system
Vulnerable Versions:
1.0

Timeline

Official Publish: September 1st, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.