What’s Vulnerable › Vulnerabilities

CVE-2023-23014

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-01-20 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php.

Affected products

• Inventory System Project Inventory System: through 2021-04-23

References

• https://gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7
• https://github.com/ronknight/InventorySystem/issues/23
• https://gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7
• https://github.com/ronknight/InventorySystem/issues/23

Get alerted when CVE-2023-23014 or the next vulnerability affects your stack