| Titel | code-projects Church Donation System 1.0 Cross Site Scripting |
|---|
| Beschreibung | A stored XSS vulnerability was discovered in the edit_members.php endpoint of the web application. When submitting a POST request to this page with a specially crafted payload in the fname parameter, malicious JavaScript code is permanently stored and later executed whenever the member’s details are viewed. |
|---|
| Quelle | ⚠️ https://github.com/enigma522/cve/issues/2 |
|---|
| Benutzer | Enigma522 (UID 88000) |
|---|
| Einreichung | 22.07.2025 14:56 (vor 1 Jahr) |
|---|
| Moderieren | 25.07.2025 09:25 (3 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 317581 [code-projects Church Donation System 1.0 /admin/edit_members.php fname Cross Site Scripting] |
|---|
| Punkte | 18 |
|---|