| Title | SourceCodester Online Eyewear Shop 1.0 Cross Site Scripting |
|---|
| Description | **Stored XSS Vulnerability in Online Eyewear Shop Website 1.0**
A stored cross-site scripting (XSS) vulnerability was identified in the Online Eyewear Shop Website version 1.0. The flaw resides in the product inventory detail page, where malicious actors can inject persistent scripts into the stock history. This vulnerability allows attackers to execute arbitrary JavaScript, potentially leading to session hijacking or other malicious actions against both users and administrators.
|
|---|
| Source | ⚠️ https://gist.github.com/higordiego/1c1e1709a6832cb63bbe9e9328f55ff9 |
|---|
| User | c4ttr4ck (UID 75518) |
|---|
| Submission | 10/12/2024 12:21 AM (2 months ago) |
|---|
| Moderation | 10/12/2024 08:32 AM (8 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB Entry | 280182 [SourceCodester Online Eyewear Shop 1.0 view_inventory&id=2 Code cross site scripting] |
|---|
| Points | 20 |
|---|