| 제목 | PHPJABBERS Restaurant Menu Maker V1.1 Cross Site Scripting |
|---|
| 설명 | During the security assessment of "Restaurant Menu Maker Project", I detected a critical Cross-Site Scripting vulnerability in the "preview.php" file. The vulnerability occurs when user-controlled input from the "theme" parameter is reflected in the web page without proper output encoding. This allows attackers to craft malicious URLs containing JavaScript payloads that will be executed when victims visit the compromised page. |
|---|
| 원천 | ⚠️ https://github.com/485961590/CVE/issues/1 |
|---|
| 사용자 | nyxswl (UID 90273) |
|---|
| 제출 | 2025. 09. 16. AM 11:04 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 21. PM 06:14 (5 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 325184 [PHPJabbers Restaurant Menu Maker 까지 1.1 /preview.php theme 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|