| Titre | SourceCodester Road Accident Map Marker 1.0 Cross Site Scripting |
|---|
| Description | The user input for the field `details` of the endpoints/add-marker.php is not escaped properly resulting in a XSS vulnerability. It is possible to initiate the attack remotely.
The previous submit was by accident with a private repo |
|---|
| La source | ⚠️ https://www.singto.io/pocsforexploits/accident_marker_xss.md |
|---|
| Utilisateur | Jelle Janssens (UID 81048) |
|---|
| Soumission | 01/02/2025 06:38 (il y a 2 ans) |
|---|
| Modérer | 01/02/2025 19:56 (13 hours later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 289712 [SourceCodester Road Accident Map Marker 1.0 /endpoint/add-mark.php mark_name/details cross site scripting] |
|---|
| Points | 0 |
|---|