| शीर्षक | code-projects Public Chat Room 1.0 Stored XSS |
|---|
| विवरण | This vulnerability appears in the chat message rendering logic, where user-submitted content such as "chat_msg" and "your_name" is retrieved from the database and directly echoed into the HTML page without proper HTML encoding. An attacker can inject malicious HTML or JavaScript content, which will execute in other users' browsers when they view the page, resulting in a Cross-Site Scripting (XSS) attack. |
|---|
| स्रोत | ⚠️ https://github.com/BalanceLee/CVE/issues/6 |
|---|
| उपयोगकर्ता | balancelee (UID 87843) |
|---|
| सबमिशन | 20/07/2025 05:14 PM (1 वर्ष पहले) |
|---|
| संयम | 21/07/2025 11:26 AM (18 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 317097 [code-projects Public Chat Room 1.0 /send_message.php chat_msg/your_name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|