| Название | SourceCodester Online Eyewear Shop 1.0 Cross Site Scripting |
|---|
| Описание | **Stored XSS Vulnerability in Online Eyewear Shop Website 1.0**
A stored cross-site scripting (XSS) vulnerability was identified in the Online Eyewear Shop Website version 1.0. The flaw resides in the product inventory detail page, where malicious actors can inject persistent scripts into the stock history. This vulnerability allows attackers to execute arbitrary JavaScript, potentially leading to session hijacking or other malicious actions against both users and administrators.
|
|---|
| Источник | ⚠️ https://gist.github.com/higordiego/1c1e1709a6832cb63bbe9e9328f55ff9 |
|---|
| Пользователь | c4ttr4ck (UID 75518) |
|---|
| Представление | 12.10.2024 00:21 (2 лет назад) |
|---|
| Модерация | 12.10.2024 08:32 (8 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 280182 [SourceCodester Online Eyewear Shop 1.0 view_inventory&id=2 Code межсайтовый скриптинг] |
|---|
| Баллы | 20 |
|---|