ORETNOM23 Book Store Management System vulnerabilities

2 CVEs affecting ORETNOM23 Book Store Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49540, published 2024-03-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-49540, published 2024-03-01. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history. This vulnerability allows attackers to execute arbitrary web…
CVE-2023-49539, published 2024-03-01. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category. This vulnerability allows attackers to execute arbitrary web…