| عنوان | code-projects E-Commerce Site 1.0 Reflected XSS |
|---|
| الوصف | The vulnerability occurs in the search.php page, where user input from the keyword parameter is embedded directly into the HTML output without proper sanitization or encoding. This allows attackers to craft malicious JavaScript that executes in the victim’s browser, leading to cookie theft, session hijacking, phishing, and more. |
|---|
| المصدر | ⚠️ https://github.com/BalanceLee/CVE/issues/4 |
|---|
| المستخدم | balancelee (UID 87843) |
|---|
| ارسال | 14/07/2025 09:04 AM (1 سنة منذ) |
|---|
| الاعتدال | 17/07/2025 12:38 PM (3 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 249096 [code-projects E-Commerce Site 1.0 search.php keyword البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|