CVE-2023-0966

A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/view_order. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221635.

• CWE-79

• https://github.com/1MurasaKi/Eyewear_Shop_XSS/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221635Permissions Required
• https://vuldb.com/?id.221635Permissions Required
• https://github.com/1MurasaKi/Eyewear_Shop_XSS/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221635Permissions Required
• https://vuldb.com/?id.221635Permissions Required

Published

Feb 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0960A vulnerability was found in SeaCMS 11.6 and classified as p…9.8
• CVE-2023-0961A vulnerability was found in SourceCodester Music Gallery Si…9.8
• CVE-2023-0962A vulnerability was found in SourceCodester Music Gallery Si…8.8
• CVE-2023-0963A vulnerability was found in SourceCodester Music Gallery Si…9.8
• CVE-2023-0964A vulnerability classified as critical has been found in Sou…8.1
• CVE-2023-0965 Compiler removal of buffer clearing in sli_cryptoacc_transp…7.5
• CVE-2023-0967Bhima version 1.27.0 allows an attacker authenticated with n…6.5
• CVE-2023-0968The Watu Quiz plugin for WordPress is vulnerable to Reflecte…6.1
• CVE-2023-0969A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier a…3.5
• CVE-2023-0970Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gate…6.8
• CVE-2023-0971A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier…8.8
• CVE-2023-0972Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 …8.8