Title | Sourcecodester Laundry Management System v1.0 Cross-Site Scripting |
---|
Description | Laundry Management System Store XSS (/ci_laundry/karyawan/edit) .This code snippet is potentially vulnerable to Cross-Site Scripting (XSS) attacks. The issue lies in the direct output of the `$karyawan->alamat` variable's value into the `value` attribute using `<?php echo $karyawan->alamat ?>`. If `$karyawan->alamat` contains malicious JavaScript code, then this code will be executed when the page loads and renders this `input` tag. |
---|
Source | ⚠️ https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemXSS.md |
---|
User | LI YU (ID 67398) |
---|
Submission | 08.04.2024 09:15 (1 month ago) |
---|
Moderation | 08.04.2024 14:33 (5 hours later) |
---|
Status | Akzeptiert |
---|
VulDB Entry | 259744 |
---|