| शीर्षक | Open-Source SolidInvoic 2.4.0 stored Cross-Site Scripting (XSS) |
|---|
| विवरण | SolidInvoice 2.4.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the Quote module (/quotes). The name parameter (Quote title field) is not properly sanitized during quote creation, allowing an authenticated attacker to inject malicious JavaScript code. The payload is persistently stored in the application and is executed whenever the quotes list is accessed, impacting all authenticated users. Exploitation requires authentication.
This is PoC Stored XSS 3. The complete proof of concept and detailed exploitation steps are documented in the file: ???? PoC Stored XSS 3.md |
|---|
| स्रोत | ⚠️ https://github.com/Gabrielmouraofc/PoC_Vuldb.git |
|---|
| उपयोगकर्ता | GabrielMoura (UID 88644) |
|---|
| सबमिशन | 08/08/2025 02:59 AM (10 महीनों पहले) |
|---|
| संयम | 19/08/2025 03:37 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 320546 [SolidInvoice तक 2.4.0 Quote /quotes नाम क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|