CVE-2023-7124

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096.

• CWE-79

• https://github.com/h4md153v63n/CVEs/blob/main/E-commerce_Site/E-commerce_Site-Reflected_Cross_Site_Scripting.mdExploit
• https://vuldb.com/?ctiid.249096Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.249096Third Party Advisory, VDB Entry
• https://github.com/h4md153v63n/CVEs/blob/main/E-commerce_Site/E-commerce_Site-Reflected_Cross_Site_Scripting.mdExploit
• https://vuldb.com/?ctiid.249096Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.249096Third Party Advisory, VDB Entry

Published

Dec 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7111A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-7113Mattermost version 8.1.6 and earlier fails to sanitize chann…6.1
• CVE-2023-7114Mattermost version 2.10.0 and earlier fails to sanitize deep…8.8
• CVE-2023-7115The Page Builder: Pagelayer WordPress plugin before 1.8.1 do…4.8
• CVE-2023-7116A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7123A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7125The Community by PeepSo WordPress plugin before 6.3.1.2 does…4.3
• CVE-2023-7126A vulnerability classified as critical has been found in cod…8.8
• CVE-2023-7127A vulnerability classified as critical was found in code-pro…9.8
• CVE-2023-7128A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-7129A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-7130A vulnerability has been found in code-projects College Note…8.8