| शीर्षक | SourceCodester Photo Share Website using PHP/MySQL with Source Code V1.0 Cross Site Scripting |
|---|
| विवरण | The 'comment' parameter (handled during the comment submission process, likely via ajax.php) of Photo Share Website v1.0 is vulnerable to Stored Cross-Site Scripting (XSS) due to inadequate input validation and output HTML encoding. An attacker can inject malicious JavaScript into the comment box. Once submitted, the script is stored on the server and executed automatically whenever a user views the gallery page where the comment is displayed. |
|---|
| स्रोत | ⚠️ https://github.com/gensnext/cve/issues/1 |
|---|
| उपयोगकर्ता | w4yl (UID 60425) |
|---|
| सबमिशन | 21/06/2026 03:00 PM (2 महीनों पहले) |
|---|
| संयम | 07/08/2026 10:34 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 386954 [SourceCodester Photo Share Website 1.0 index.php?page=home टिप्पणी क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|