CVE-2023-7075

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248846 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/Glunko/vulnerability/blob/main/Point-of-Sales-And-Inventory-Management-System.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248846Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248846Third Party Advisory
• https://github.com/Glunko/vulnerability/blob/main/Point-of-Sales-And-Inventory-Management-System.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248846Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248846Third Party Advisory

Published

Dec 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7069The Advanced iFrame plugin for WordPress is vulnerable to St…5.4
• CVE-2023-7070The Email Encoder – Protect Email Addresses and Phone Number…5.4
• CVE-2023-7071The Essential Blocks – Page Builder Gutenberg Blocks, Patter…5.4
• CVE-2023-7072The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPr…7.5
• CVE-2023-7073The Auto Featured Image (Auto Post Thumbnail) plugin for Wor…6.4
• CVE-2023-7074The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 doe…8.8
• CVE-2023-7076A vulnerability was found in slawkens MyAAC up to 0.8.13. It…6.1
• CVE-2023-7077Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X4…9.8
• CVE-2023-7078Sending specially crafted HTTP requests to Miniflare's serve…8.1
• CVE-2023-7079Sending specially crafted HTTP requests and inspector messag…5.7
• CVE-2023-7080The V8 inspector intentionally allows arbitrary code executi…8
• CVE-2023-7081Improper Neutralization of Special Elements used in an SQL C…9.8