| शीर्षक | SourceCodester Leads Manager Tool 1.0 Cross Site Scripting |
|---|
| विवरण | The vulnerability exists in the leads management tool where user input is not properly sanitized before being embedded into HTML and JavaScript contexts. Specifically, the phone_number parameter is susceptible to XSS due to the lack of proper output encoding. An attacker can inject malicious JavaScript code into this field, which, when viewed by other users, will be executed in their browser, potentially leading to data theft, session hijacking, or phishing attacks.
|
|---|
| स्रोत | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Lead_Manager_Tool_Update_Leads_XSS.md |
|---|
| उपयोगकर्ता | jadu101 (UID 70632) |
|---|
| सबमिशन | 18/08/2024 04:45 AM (2 साल पहले) |
|---|
| संयम | 19/08/2024 05:07 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 275134 [SourceCodester Leads Manager Tool 1.0 update-leads.php phone_number क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|