CVE-2023-23010

Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php.

• CWE-79
• CWE-79

• https://gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533Exploit, Patch, Third Party Advisory
• https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d5904379ca55014c5df34c67deda982c73dc7fe5Patch, Third Party Advisory
• https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242Exploit, Issue Tracking, Patch, Third Party Advisory
• https://gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533Exploit, Patch, Third Party Advisory
• https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d5904379ca55014c5df34c67deda982c73dc7fe5Patch, Third Party Advisory
• https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23004In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_…5.5
• CVE-2023-23005In the Linux kernel before 6.2, mm/memory-tiers.c misinterpr…5.5
• CVE-2023-23006In the Linux kernel before 5.15.13, drivers/net/ethernet/mel…5.5
• CVE-2023-23007An issue was discovered in ESPCMS P8.21120101 after logging …7.2
• CVE-2023-23009Libreswan 4.9 allows remote attackers to cause a denial of s…6.5
• CVE-2023-2301The Contact Form Builder by vcita plugin for WordPress is vu…6.1
• CVE-2023-23011Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6…6.1
• CVE-2023-23012Cross Site Scripting (XSS) vulnerability in craigrodway clas…6.1
• CVE-2023-23014Cross Site Scripting (XSS) vulnerability in InventorySystem …6.1
• CVE-2023-23015Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via…6.1
• CVE-2023-23019Cross site scripting (XSS) vulnerability in file main.php in…5.4
• CVE-2023-2302The Contact Form and Calls To Action by vcita plugin for Wor…5.4