{"api_version":"1","generated_at":"2026-07-23T13:23:57+00:00","cve":"CVE-2023-24233","urls":{"html":"https://cve.report/CVE-2023-24233","api":"https://cve.report/api/cve/CVE-2023-24233.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-24233","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-24233"},"summary":{"title":"CVE-2023-24233","description":"A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2023-02-10 16:15:00","updated_at":"2023-11-07 04:08:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://github.com/stemword/php-inventory-management-system","name":"https://github.com/stemword/php-inventory-management-system","refsource":"MISC","tags":[],"title":"GitHub - stemword/php-inventory-management-system: Open source inventory management system with php and mysql Invoice generation and easy to download invoice in PDF format Lightweight and easy to use Order management and product management can be done with ease Report management User wise sell report.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://medium.com/@0x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b","name":"https://medium.com/@0x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b","refsource":"MISC","tags":[],"title":"Inventory Management System — Multiple Stored XSS Vulnerability | by 0x2bit | Jan, 2023 | Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b","name":"https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b","refsource":"","tags":[],"title":"[CVE-2023–24231]Inventory Management System — Multiple Stored XSS Vulnerability | by 0x2bit | Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24233","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24233","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"24233","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"inventory_management_system_project","cpe5":"inventory_management_system","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2023-24233","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://github.com/stemword/php-inventory-management-system","refsource":"MISC","name":"https://github.com/stemword/php-inventory-management-system"},{"url":"https://medium.com/@0x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b","refsource":"MISC","name":"https://medium.com/@0x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b"}]}},"nvd":{"publishedDate":"2023-02-10 16:15:00","lastModifiedDate":"2023-11-07 04:08:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.7,"impactScore":2.7}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:inventory_management_system_project:inventory_management_system:1.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}