CVE:CVE-2023-0966
CNNVD:CNNVD-202302-1776
Online Eyewear Shop是Carlo Montero个人开发者的一个在线眼镜店。
SourceCodester Online Eyewear Shop 1.0版本存在跨站脚本漏洞，该漏洞源于文件admin/?page=orders/view_order存在问题，对参数id的操作会导致跨站脚本。
solution:Upgrade online_eyewear_shop_project online_eyewear_shop to a higher version than 1.0,and avoid the version 1.0