| शीर्षक | SourceCodester Simple Customer Relationship Management (CRM) System 1.0 Cross Site Scripting |
|---|
| विवरण | A Stored Cross Site Scripting (XSS) vulnerability was identified in the Simple Customer Relationship Management System developed by SourceCodester.
The vulnerability exists in the Create Ticket functionality where user supplied input is not properly sanitized before being stored and rendered in the application.
An attacker can inject malicious JavaScript payloads into the ticket description field. When the ticket is later viewed in the View Ticket section, the injected script executes in the victim's browser.
This vulnerability may allow attackers to execute arbitrary JavaScript code, steal session cookies, perform actions on behalf of the victim or conduct phishing attacks. |
|---|
| स्रोत | ⚠️ https://medium.com/@hemantrajbhati5555/stored-cross-site-scripting-xss-in-simple-customer-relationship-management-system-crm-php-15a904589844 |
|---|
| उपयोगकर्ता | Hemant Raj Bhati (UID 95613) |
|---|
| सबमिशन | 16/03/2026 12:20 PM (7 महीनों पहले) |
|---|
| संयम | 01/04/2026 03:15 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354656 [SourceCodester Simple Customer Relationship Management System 1.0 Create Ticket /create-ticket.php विवरण क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|