CVE-2023-3857

A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235209 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://vuldb.com/?ctiid.235209Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235209Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.235209Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235209Permissions Required, Third Party Advisory

Published

Jul 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38563Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2…8.8
• CVE-2023-38564The issue was addressed with improved checks. This issue is …7.5
• CVE-2023-38565A path handling issue was addressed with improved validation…7.8
• CVE-2023-38566Uncontrolled search path in some Intel(R) ISPC software befo…7.8
• CVE-2023-38568Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230…8.8
• CVE-2023-38569Stored cross-site scripting vulnerability in SHIRASAGI prior…5.4
• CVE-2023-38570Access of memory location after end of buffer for some Intel…7.8
• CVE-2023-38571This issue was addressed with improved validation of symlink…7.5
• CVE-2023-38572The issue was addressed with improved checks. This issue is …7.5
• CVE-2023-38573A use-after-free vulnerability exists in the way Foxit Reade…8.8
• CVE-2023-38574Open redirect vulnerability in VI Web Client prior to 7.9.6 …6.1
• CVE-2023-38575Non-transparent sharing of return predictor targets between …5.5