| शीर्षक | code-projects Simple Food Ordering System 1.0 Improper Neutralization of Alternate XSS Syntax |
|---|
| विवरण | This code segment is vulnerable to stored Cross-Site Scripting (XSS) attacks because it outputs database content directly into the HTML page without proper escaping. An attacker can inject malicious JavaScript code into fields such as product name or category name. When a user visits the order page, the injected script will execute in their browser.
Theft of user cookies or session tokens, leading to account hijacking.
Execution of unauthorized actions on behalf of the user (such as placing orders or changing account details).
Display of fake content or phishing forms to trick users into revealing sensitive information.
Potential spread of malware if malicious scripts are injected. |
|---|
| स्रोत | ⚠️ https://github.com/asd1238525/cve/blob/main/xss3.md |
|---|
| उपयोगकर्ता | yunlin (UID 79129) |
|---|
| सबमिशन | 17/09/2025 09:06 AM (1 वर्ष पहले) |
|---|
| संयम | 21/09/2025 09:44 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325194 [code-projects Simple Food Ordering System 1.0 /ordersimple/order.php id क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|