CVE-2023-1418

A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability.

• CWE-79

• https://github.com/2889436547/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/XSS-1.mdExploit, Vendor Advisory
• https://vuldb.com/?ctiid.223129Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223129Third Party Advisory
• https://github.com/2889436547/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/XSS-1.mdExploit, Vendor Advisory
• https://vuldb.com/?ctiid.223129Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223129Third Party Advisory

Published

Mar 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1412An unprivileged (non-admin) user can exploit an Improper Acc…7.8
• CVE-2023-1413The WP VR WordPress plugin before 8.2.9 does not sanitise an…6.1
• CVE-2023-1414The WP VR WordPress plugin before 8.3.0 does not have author…4.3
• CVE-2023-1415A vulnerability was found in Simple Art Gallery 1.0. It has …8.8
• CVE-2023-1416A vulnerability classified as critical has been found in Sim…9.8
• CVE-2023-1417An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1419A script injection vulnerability was found in the Debezium d…5.9
• CVE-2023-1420The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Se…6.1
• CVE-2023-1421A reflected cross-site scripting vulnerability in the OAuth …6.1
• CVE-2023-1424Buffer Copy without Checking Size of Input ('Classic Buffer …8.1
• CVE-2023-1425The WordPress CRM, Email & Marketing Automation for WordPres…7.2
• CVE-2023-1426The WP Tiles WordPress plugin through 1.1.2 does not ensure …6.5