漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SourceCodester E-Commerce System cross site scripting
Vulnerability Description
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input <script>alert('1')</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
SourceCodester E-Commerce System 跨站脚本漏洞
Vulnerability Description
Moosikay E-Commerce System是Arvin Arandilla个人开发者的一个电子商务系统。 SourceCodester E-Commerce System 1.0版本存在跨站脚本漏洞，该漏洞源于文件admin/user/controller.php?action=edit存在问题，对参数U_NAME的操作会导致跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A