| शीर्षक | CodeAstro Human Resource Management System in PHP CodeIgniter v1.0 Cross Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability has been identified in the To-Do List functionality of CodeAstro Human Resource Management System in PHP CodeIgniter (https://codeastro.com/human-resource-management-system-in-php-codeigniter-with-source-code/). The issue exists because user-supplied input submitted through the (todo_data) parameter is not properly sanitized before being stored and rendered within the dashboard interface.
An attacker can inject arbitrary JavaScript payloads into a to-do entry. The malicious payload is executed immediately after submission and continues to execute whenever the dashboard page is visited or the To-Do List section is loaded, confirming the presence of a persistent/stored XSS vulnerability.
Successful exploitation may allow attackers to hijack user sessions, perform actions on behalf of authenticated users, manipulate dashboard content, or steal sensitive information accessible within the application context. |
|---|
| स्रोत | ⚠️ https://github.com/ashikmd0507/CVE/tree/main/Stored-XSS-via-TO-DO-LIST |
|---|
| उपयोगकर्ता | ashikmd7 (UID 98284) |
|---|
| सबमिशन | 26/05/2026 01:09 PM (4 महीनों पहले) |
|---|
| संयम | 12/06/2026 05:21 PM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 370614 [CodeAstro Human Resource Management System 1.0 Dashboard Interface /dashboard/add_tod todo_data क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|