CVE-2023-36346
CVE-2023-36346
Vexday Risk Score
38Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 5.3%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
23 Jun 2023Published on NVD
03 Jul 2023Public PoC
Weaponization speed
10 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencepacketstormsecurity.com/files/173280/Sales-Of-Cashier-Goods-1.0-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51549unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.