| शीर्षक | SourceCodester Photo Share Website V1.0 Cross Site Scripting |
|---|
| विवरण | The 'content' parameter in the /social/ajax.php?action=save_upload file of sourcecodester Photo Share Website using PHP/MySQL with Source Code V1.0 is vulnerable to Stored Cross-Site Scripting (XSS). This vulnerability is a result of inadequate input validation and sanitization of user-provided data before it is permanently stored on the server. An attacker could take advantage of this flaw by injecting malicious scripts into these parameters via form submissions. Once stored in the database, these scripts will silently and automatically execute whenever other users or administrators access the page where the stored content is displayed. |
|---|
| स्रोत | ⚠️ https://github.com/Andyov0/cve/issues/1 |
|---|
| उपयोगकर्ता | Andyqaq (UID 99158) |
|---|
| सबमिशन | 21/06/2026 05:03 PM (2 महीनों पहले) |
|---|
| संयम | 07/08/2026 12:41 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 386994 [SourceCodester Photo Share Website 1.0 Comment Input Box ajax.php?action=save_upload content क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|