| Название | PHPGurukul Small CRM 4.0 Cross Site Scripting |
|---|
| Описание | A critical Stored Cross-Site Scripting (XSS) vulnerability exists in PHPGurukul's Small CRM (v4.0) within the profile update functionality. Attackers can inject persistent malicious scripts via the name parameter in profile.php, which execute when victims view their profile. |
|---|
| Источник | ⚠️ https://github.com/Ant1sec-ops/small-crm-4.0-stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| Пользователь | Subhash Paudel (UID 66830) |
|---|
| Представление | 31.05.2025 10:41 (1 Год назад) |
|---|
| Модерация | 04.06.2025 12:13 (4 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 295137 [PHPGurukul Small CRM 3.0 profile.php name межсайтовый скриптинг] |
|---|
| Баллы | 0 |
|---|