| शीर्षक | CodeAstro Membership Management System v1.0 1.0 Stored Cross-Site Scripting (Stored XSS) via SVG Logo |
|---|
| विवरण | A Stored Cross-Site Scripting (XSS) vulnerability exists in Membership Management System v1.0 by CodeAstro due to improper validation of uploaded SVG files in the Settings logo upload functionality. An authenticated administrator can upload a malicious SVG containing embedded JavaScript, which is stored by the application. When the uploaded logo is opened directly in a new browser tab, the malicious script executes in the application's origin, potentially allowing session hijacking, phishing, DOM manipulation, and other client-side attacks.
|
|---|
| स्रोत | ⚠️ https://github.com/Ammar7543/CVE/issues/1 |
|---|
| उपयोगकर्ता | Muhammad_Ammar (UID 99381) |
|---|
| सबमिशन | 29/06/2026 04:50 PM (3 महीनों पहले) |
|---|
| संयम | 16/08/2026 10:37 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 254606 [CodeAstro Membership Management System 1.0 Logo /uploads/ अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|