| 제목 | https://github.com/mathurvishal/CloudClassroom-PHP-Project/blob/ CloudClassroom PHP Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be Cross Site Scripting |
|---|
| 설명 | A Stored Cross-Site Scripting (Stored XSS) vulnerability exists in CloudClassroom PHP Project 1.0 within the Faculty Video Management functionality (`managevideos2.php`).
The vulnerability exists because the application stores user-controlled input from the `V_Title`, `V_Url`, and `V_Remarks` fields and later includes these values in the generated HTML response without proper output encoding.
The affected input is not properly neutralized before being rendered by the application, causing user-controlled data to be interpreted by the browser as HTML content instead of plain text.
This issue is caused by improper neutralization of input during web page generation (CWE-79). |
|---|
| 원천 | ⚠️ https://github.com/raffarj/CVE/edit/main/README.md |
|---|
| 사용자 | raffarj (UID 100182) |
|---|
| 제출 | 2026. 08. 04. AM 03:47 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 25. PM 09:10 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 410439 [mathurvishal CloudClassroom-PHP-Project 까지 5dadec098bfbbf3300d60c3494db3fb95b66e7be Faculty Video Management managevideos2.php V_Title/V_Url/V_Remarks 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|