Medium severity6.1NVD Advisory· Published Jan 20, 2023· Updated Jun 17, 2026
CVE-2023-23014
CVE-2023-23014
Description
Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:inventory_system_project:inventory_system:*:*:*:*:*:*:*:*Range: <=2021-04-23
- InventorySystem/InventorySystemdescription
- Range: thru commit e08fbbe17902146313501ed0b5feba81d58f455c
Patches
Vulnerability mechanics
References
2- gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7nvdExploitThird Party Advisory
- github.com/ronknight/InventorySystem/issues/23nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.