CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter.

• CWE-79

• https://github.com/geraldoalcantara/CVE-2023-49539Exploit, Third Party Advisory
• https://owasp.org/Top10/A03_2021-Injection/Not Applicable
• https://owasp.org/www-community/attacks/xss/Not Applicable
• https://www.sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.htmlProduct
• https://github.com/geraldoalcantara/CVE-2023-49539Exploit, Third Party Advisory
• https://owasp.org/Top10/A03_2021-Injection/Not Applicable
• https://owasp.org/www-community/attacks/xss/Not Applicable
• https://www.sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.htmlProduct

Published

Mar 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49501Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5…8
• CVE-2023-49502Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5…8.8
• CVE-2023-49508Directory Traversal vulnerability in YetiForceCompany YetiFo…6.5
• CVE-2023-4951A cross site scripting issue was discovered with the paginat…4.8
• CVE-2023-49515Insecure Permissiosn vulnerability in TP Link TC70 and C200 …4.6
• CVE-2023-49528Buffer Overflow vulnerability in FFmpeg version n6.1-3-g4667…8
• CVE-2023-49540Book Store Management System v1.0 was discovered to contain …6.1
• CVE-2023-49543Incorrect access control in Book Store Management System v1 …9.8
• CVE-2023-49544A local file inclusion (LFI) in Customer Support System v1 a…4.9
• CVE-2023-49545A directory listing vulnerability in Customer Support System…7.5
• CVE-2023-49546Customer Support System v1 was discovered to contain a SQL i…8.8
• CVE-2023-49547Customer Support System v1 was discovered to contain a SQL i…9.8