| 제목 | code-projects Invoice System in Laravel 1.0 DOM-Based Cross-Site Scripting (XSS) |
|---|
| 설명 | The JavaScript logic responsible for dynamically adding items to the invoice form uses innerHTML to render item names and descriptions. If these fields are populated with malicious payloads (e.g., via the /item update or creation flow), they will execute in the browser of any user opening the invoice form. |
|---|
| 원천 | ⚠️ https://gist.github.com/higordiego/dd7f841bbd1b8b951434511d044f7c6e |
|---|
| 사용자 | c4ttr4ck (UID 75518) |
|---|
| 제출 | 2026. 04. 09. AM 03:49 (5 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 26. PM 04:45 (18 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 359711 [code-projects Invoice System in Laravel 1.0 /item item name/description 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|