{"id":"CVE-2024-57326","aliases":["EUVD-2024-53563","GHSA-q97f-8w55-q948"],"status":"published","title":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online...","description":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00287,"percentile":0.21361,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-01-23T00:00:00Z","modified":"2026-06-17T08:13:29Z","products":[{"vendor":"online_pizza_delivery_system_project","product":"online_pizza_delivery_system"}],"references":[{"url":"https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57326","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57326"},{"url":"https://github.com/advisories/GHSA-q97f-8w55-q948"}],"sources":{"cve":[{"id":"CVE-2024-57326","description":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.","status":"published","published":"2025-01-23T00:00:00Z","modified":"2025-01-24T21:17:43.791Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:07.152829Z"}],"euvd":[{"id":"EUVD-2024-53563","description":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.","status":"published","published":"2025-01-23T00:00:00Z","modified":"2025-01-24T21:17:43Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:13.087176Z"}],"ghsa":[{"id":"GHSA-q97f-8w55-q948","title":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online...","description":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.","status":"published","published":"2025-01-24T00:31:46Z","modified":"2025-01-25T00:34:14Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:59:40.658623Z"}],"nvd":[{"id":"CVE-2024-57326","description":"A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.","status":"published","published":"2025-01-23T22:15:14.8Z","modified":"2026-06-17T08:13:29.683Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:42.895329Z"}]}}