| Titolo | Simple Sales Management System 1.0 Stored Cross-Site Scripting |
|---|
| Descrizione | A vulnerability classified as problematic has been found in Simple Sales Management System 1.0. Affected is an unknown function of the file index.php of the component orders create. The manipulation of the argument customer_name with the input foo<script>alert("XSS")</script> leads to cross-site scripting. |
|---|
| Fonte | ⚠️ https://github.com/CyberThoth/CVE/blob/a203e5c7b3ac88a5a0bc7200324f2b24716e8fc2/CVE/Simple%20Sales%20Management%20System/Cross%20Site%20Scripting(Stored)/POC.md |
|---|
| Utente | cyberthoth (UID 28322) |
|---|
| Sottomissione | 03/07/2022 03:13 (4 anni fa) |
|---|
| Moderazione | 03/07/2022 12:01 (9 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 203167 [SourceCodester Simple Sales Management System 1.0 create customer_name cross site scripting] |
|---|
| Punti | 18 |
|---|