| शीर्षक | BichitroGan ISP Billing System 2025.3.20 Stored Cross-Site Scripting (XSS) |
|---|
| विवरण | The application allows users to update their profile information, including the fullname field. This input is stored in the database and
later rendered in various parts of the application without proper output encoding. An attacker can inject malicious JavaScript into the fullname field, which will execute in the browser of any user viewing the affected page, including administrators. |
|---|
| स्रोत | ⚠️ https://github.com/4m3rr0r/PoCVulDb/issues/17 |
|---|
| उपयोगकर्ता | 4m3rr0r (UID 85795) |
|---|
| सबमिशन | 29/03/2026 03:01 PM (6 महीनों पहले) |
|---|
| संयम | 19/04/2026 06:32 PM (21 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358258 [BichitroGan ISP Billing Software 2025.3.20 Profile Page users-view क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 19 |
|---|