| शीर्षक | BichitroGan ISP Billing System 2025.3.20 Stored Cross-Site Scripting (XSS) |
|---|
| विवरण | The application allows users or administrators to input data into the Full Name and Home Address fields without proper sanitization or output encoding.
These values are stored in the database and later rendered in multiple parts of the application, including customer list and edit pages.
Because the application fails to escape user input before rendering it in HTML, attackers can inject malicious JavaScript payloads that execute in the browser of any user viewing the affected page. |
|---|
| स्रोत | ⚠️ https://github.com/4m3rr0r/PoCVulDb/issues/18 |
|---|
| उपयोगकर्ता | 4m3rr0r (UID 85795) |
|---|
| सबमिशन | 29/03/2026 03:00 PM (6 महीनों पहले) |
|---|
| संयम | 19/04/2026 06:32 PM (21 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358257 [BichitroGan ISP Billing Software 2025.3.20 Customer edit क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|