Skip to content

SourceCodester · weakness class

Cross-site Scripting

465 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 465 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. SourceCodester Simple Food Ordering System process_order.php cross site scriptingCVE-2023-0902SourceCodester · CVSS 3.5 · 2.7% likely

    CWE-79

  2. SourceCodester Computer Inventory System update-computer.php cross site scriptingCVE-2024-2068SourceCodester · CVSS 3.5 · 2.5% likely

    CWE-79

  3. SourceCodester Sales Tracker Management System cross site scriptingCVE-2023-3184SourceCodester · CVSS 2.4 · 2.3% likely

    CWE-79

  4. SourceCodester Interview Management System addQuestion.php cross site scriptingCVE-2022-2685SourceCodester · CVSS 3.5 · 1.0% likely

    CWE-79

  5. SourceCodester Sanitization Management System cross site scriptingCVE-2022-3942SourceCodester · CVSS 4.3 · 0.8% likely

    CWE-79

  6. SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scriptingCVE-2023-1036SourceCodester · CVSS 4.3 · 0.8% likely

    CWE-79

  7. SourceCodester Resort Reservation System registration.php cross site scriptingCVE-2023-2364SourceCodester · CVSS 4.3 · 0.8% likely

    CWE-79

  8. SourceCodester Online Eyewear Shop cross site scriptingCVE-2023-0966SourceCodester · CVSS 2.4 · 0.8% likely

    CWE-79

  9. SourceCodester Simple Invoice Generator System login.php cross site scriptingCVE-2023-6650SourceCodester · CVSS 4.3 · 0.8% likely

    CWE-79

  10. SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scriptingCVE-2024-6807SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

  11. SourceCodester Simple Cold Storage Management System Create User cross site scriptingCVE-2022-3546SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

  12. SourceCodester Online Learning System V2 index.php cross site scriptingCVE-2024-1970SourceCodester · CVSS 4.3 · 0.7% likely

    CWE-79

  13. SourceCodester Royale Event Management System companyprofile.php cross site scriptingCVE-2022-1102SourceCodester · CVSS 4.3 · 0.7% likely

    CWE-79

  14. SourceCodester Online Computer and Laptop Store products.php cross site scriptingCVE-2023-2657SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  15. SourceCodester Online Admission System index.php cross site scriptingCVE-2022-2646SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  16. SourceCodester Microfinance Management System addcustomerHandler.php cross site scriptingCVE-2022-1081SourceCodester · CVSS 4.3 · 0.7% likely

    CWE-79

  17. SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scriptingCVE-2024-7644SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  18. SourceCodester Sanitization Management System User Creation cross site scriptingCVE-2022-3518SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

  19. SourceCodester Simple Cold Storage Management System Add New Storage cross site scriptingCVE-2022-3548SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

  20. SourceCodester Apartment Visitor Management System manage-apartment.php cross site scriptingCVE-2022-2684SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  21. SourceCodester Simple Food Ordering System login.php cross site scriptingCVE-2022-2683SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  22. SourceCodester Hotel Management System Search search cross site scriptingCVE-2022-2291SourceCodester · CVSS 4.3 · 0.7% likely

    CWE-79

  23. SourceCodester Web-Based Student Clearance System add-student.php prepare cross site scriptingCVE-2022-3434SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  24. SourceCodester Lost and Found Information System cross site scriptingCVE-2023-2667SourceCodester · CVSS 3.5 · 0.7% likely

    CWE-79

  25. SourceCodester Online Student Clearance System add-student.php cross site scriptingCVE-2025-4470SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

  26. SourceCodester Online Student Clearance System add-admin.php cross site scriptingCVE-2025-4469SourceCodester · CVSS 2.4 · 0.7% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.