| 제목 | PHPGurukul Small CRM 4.0 Cross Site Scripting |
|---|
| 설명 | A critical Stored Cross-Site Scripting (XSS) vulnerability exists in PHPGurukul's Small CRM (v4.0) within the profile update functionality. Attackers can inject persistent malicious scripts via the name parameter in profile.php, which execute when victims view their profile. |
|---|
| 원천 | ⚠️ https://github.com/Ant1sec-ops/small-crm-4.0-stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| 사용자 | Subhash Paudel (UID 66830) |
|---|
| 제출 | 2025. 05. 31. AM 10:41 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 04. PM 12:13 (4 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 295137 [PHPGurukul Small CRM 3.0 profile.php name 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|