Submeter #588033: PHPGurukul Small CRM 4.0 Cross Site Scriptinginformação

TítuloPHPGurukul Small CRM 4.0 Cross Site Scripting
DescriçãoA critical Stored Cross-Site Scripting (XSS) vulnerability exists in PHPGurukul's Small CRM (v4.0) within the profile update functionality. Attackers can inject persistent malicious scripts via the name parameter in profile.php, which execute when victims view their profile.
Fonte⚠️ https://github.com/Ant1sec-ops/small-crm-4.0-stored-XSS/blob/main/stored-xss-exploit.md
Utilizador
 Subhash Paudel (UID 66830)
Submissão31/05/2025 10h41 (há 1 Ano)
Moderação04/06/2025 12h13 (4 days later)
EstadoDuplicado
Entrada VulDB295137 [PHPGurukul Small CRM 3.0 profile.php Nome Script de Site Cruzado]
Pontos0

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!