| शीर्षक | SourceCodester Pet grooming management software 1.0 Cross Site Scripting |
|---|
| विवरण | The Sourcecodester Pet Grooming Management Software contains a stored cross-site scripting (XSS) vulnerability in the User Profile update functionality. The application fails to sanitize or encode user-supplied input before storing it in the database.
An authenticated low-privileged user can inject malicious JavaScript into the Address field. When an administrator later views the affected user profile via the Admin Panel, the stored payload is executed in the administrator’s browser context.
This allows attackers to perform malicious actions such as session hijacking, privilege escalation, and unauthorized administrative actions. |
|---|
| स्रोत | ⚠️ https://github.com/Asim-QAZi/Stored-Cross-Site-Scripting-in-Sourcecodester-Pet-Grooming-Management-Software |
|---|
| उपयोगकर्ता | moasim (UID 93970) |
|---|
| सबमिशन | 19/01/2026 08:51 PM (9 महीनों पहले) |
|---|
| संयम | 30/01/2026 11:53 AM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 327647 [SourceCodester Pet Grooming Management Software 1.0 /admin/profile.php First Name/Last Name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|