| शीर्षक | phpgurukul employee-record-management-system V1.3 Cross Site Scripting |
|---|
| विवरण | During a security assessment of employee-record-management-system, a critical Cross-site Scripting (XSS) vulnerability was discovered in the /myprofile.php file. This vulnerability is attributed to the insufficient output encoding of user-supplied input for the First name parameter. This allows attackers to inject malicious client-side scripts. When other users visit the page containing the malicious script, it executes within their browser, potentially leading to session hijacking, data theft, or page defacement. Immediate corrective action is essential to safeguard the system and its users. |
|---|
| स्रोत | ⚠️ https://github.com/tiancesec/CVE/issues/2 |
|---|
| उपयोगकर्ता | tiancesec (UID 90883) |
|---|
| सबमिशन | 25/09/2025 03:50 PM (1 वर्ष पहले) |
|---|
| संयम | 27/09/2025 07:32 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 326193 [PHPGurukul Employee Record Management System 1.3 /myprofile.php First name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|