Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

leads ","url":"https://cyberstrike.io/cve/CVE-2023-2293/","datePublished":"2023-04-25T21:15:10.693","dateModified":"2026-06-17T05:52:12.760","publisher":{"@id":"https://cyberstrike.io/#organization"},"isPartOf":{"@id":"https://cyberstrike.io/#website"},"about":{"@type":"SoftwareSourceCode","name":"purchase_order_management_system_project purchase_order_management_system"},"keywords":["CVE-2023-2293","low","CVSS 2.4","CWE-79","purchase_order_management_system_project purchase_order_management_system"]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://cyberstrike.io"},{"@type":"ListItem","position":2,"name":"CVE Database","item":"https://cyberstrike.io/cve/"},{"@type":"ListItem","position":3,"name":"2023","item":"https://cyberstrike.io/cve/year/2023/"},{"@type":"ListItem","position":4,"name":"CVE-2023-2293","item":"https://cyberstrike.io/cve/CVE-2023-2293/"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What is CVE-2023-2293?","acceptedAnswer":{"@type":"Answer","text":"CVE-2023-2293 is a low-severity vulnerability affecting purchase_order_management_system_project purchase_order_management_system. It was published on April 25, 2023 and has a CVSS 3.1 base score of 2.4 (LOW)."}},{"@type":"Question","name":"How severe is CVE-2023-2293?","acceptedAnswer":{"@type":"Answer","text":"This vulnerability has a CVSS 3.1 base score of 2.4, rated LOW. It can be exploited remotely over the network. Some level of privileges is required for exploitation."}},{"@type":"Question","name":"How do I fix or remediate CVE-2023-2293?","acceptedAnswer":{"@type":"Answer","text":"Check the references section for vendor advisories and patches from purchase_order_management_system_project. Update purchase_order_management_system to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions."}},{"@type":"Question","name":"How can CyberStrike help with CVE-2023-2293?","acceptedAnswer":{"@type":"Answer","text":"CyberStrike's AI-powered security agents can automatically detect CVE-2023-2293 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability."}}]}]}

CVE-2023-2293

2.4 · LOW
Published Apr 25, 2023 purchase_order_management_system_project CWE-79 EPSS 0.56% (45th pctl)

Overview

CVE-2023-2293 is a low-severity vulnerability affecting purchase_order_management_system_project purchase_order_management_system. It was published on April 25, 2023 and has a CVSS 3.1 base score of 2.4 (LOW).

This vulnerability has a CVSS 3.1 base score of 2.4, rated LOW. It can be exploited remotely over the network. Some level of privileges is required for exploitation.

Technical Description

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227463.

Remediation

Check the references section for vendor advisories and patches from purchase_order_management_system_project. Update purchase_order_management_system to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status

References

GitHub github.com/biantaibao/bug_report/blob/main/XSS-1.md Ref vuldb.com/?ctiid.227463 Ref vuldb.com/?id.227463 GitHub github.com/biantaibao/bug_report/blob/main/XSS-1.md Ref vuldb.com/?ctiid.227463 Ref vuldb.com/?id.227463

Frequently Asked Questions

What is CVE-2023-2293?

CVE-2023-2293 is a low-severity vulnerability affecting purchase_order_management_system_project purchase_order_management_system. It was published on April 25, 2023 and has a CVSS 3.1 base score of 2.4 (LOW).

How severe is CVE-2023-2293?

This vulnerability has a CVSS 3.1 base score of 2.4, rated LOW. It can be exploited remotely over the network. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2023-2293?

Check the references section for vendor advisories and patches from purchase_order_management_system_project. Update purchase_order_management_system to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-2293?

CyberStrike's AI-powered security agents can automatically detect CVE-2023-2293 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related LOW CVEs from 2023

View all →
3.9
CVE-2022-22732

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote dom

3.9
CVE-2022-3083

All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Vali

3.9
CVE-2022-34376

Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A

3.9
CVE-2023-0808

A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It

3.9
CVE-2023-23939

Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versi

3.9
CVE-2023-22591

IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user wi

3.9
CVE-2022-1230

This vulnerability allows local attackers to execute arbitrary code on affected installations of Sam

3.9
CVE-2023-30544

Kiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users we

3.9
CVE-2023-30624

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtim

3.9
CVE-2021-46762

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leadi

3.9
CVE-2023-23910

Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0

3.9
CVE-2023-30571

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call

Browse by year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999