Oretnom23 Product Show Room Site — known CVE vulnerabilities

Every CVE whose affected-product data names Oretnom23 Product Show Room Site, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-33303 — CVSS 8.2 (high): SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users.
• CVE-2024-33304 — CVSS 6.1 (medium): SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users.
• CVE-2024-33302 — CVSS 5.3 (medium): SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name" under Add Users.