| शीर्षक | PHPGurukul User Registration & Login and User Management System 1.0 Cross Site Scripting |
|---|
| विवरण | A stored Cross-Site Scripting (XSS) vulnerability exists in the registration functionality of the application, where user-supplied input (e.g., First Name, Last Name) is not properly sanitized or encoded. Malicious scripts can be injected via these fields during registration. When an administrator accesses the Admin Dashboard and views the "Total Registered Users" section, the stored payload is rendered and executed in the admin’s browser context. This allows attackers to perform actions such as stealing session tokens, conducting phishing attacks, or performing unauthorized actions on behalf of the admin. |
|---|
| स्रोत | ⚠️ https://github.com/GIRISH05/User-Registration-Login-and-User-Management-System/blob/main/stored_xss_report.md |
|---|
| उपयोगकर्ता | girishbo (UID 85185) |
|---|
| सबमिशन | 12/05/2025 12:08 PM (1 वर्ष पहले) |
|---|
| संयम | 16/05/2025 09:27 PM (4 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 185275 [PHPGurukul User Registration & User Management System 2.0 Registration Form/Login System firstname/lastname क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|