| Title | GitHub Library Management System 1.0 Cross Site Scripting |
|---|
| Description | The application does not properly sanitize user input in the msg parameter of index.php, which allows an attacker to inject arbitrary JavaScript. This can result in Cross-Site Scripting (XSS), enabling actions such as session hijacking, credential theft, or redirection to malicious sites. |
|---|
| Source | ⚠️ https://gist.github.com/0xSebin/147e7f57daf7f270d957927892b0a51d |
|---|
| User | 0xSebin (UID 35195) |
|---|
| Submission | 08/23/2025 05:03 PM (7 months ago) |
|---|
| Moderation | 08/31/2025 10:24 AM (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 322056 [Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24 /index.php msg cross site scripting] |
|---|
| Points | 18 |
|---|