| عنوان | PHPGurukul Small CRM 4.0 Cross Site Scripting |
|---|
| الوصف | A critical Stored Cross-Site Scripting (XSS) vulnerability exists in PHPGurukul's Small CRM (v4.0) within the profile update functionality. Attackers can inject persistent malicious scripts via the name parameter in profile.php, which execute when victims view their profile. |
|---|
| المصدر | ⚠️ https://github.com/Ant1sec-ops/small-crm-4.0-stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| المستخدم | Subhash Paudel (UID 66830) |
|---|
| ارسال | 31/05/2025 10:41 AM (1 سنة منذ) |
|---|
| الاعتدال | 04/06/2025 12:13 PM (4 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 295137 [PHPGurukul Small CRM 3.0 profile.php name البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|