| Название | code-projects Invoice System in Laravel 1.0 DOM-Based Cross-Site Scripting (XSS) |
|---|
| Описание | The JavaScript logic responsible for dynamically adding items to the invoice form uses innerHTML to render item names and descriptions. If these fields are populated with malicious payloads (e.g., via the /item update or creation flow), they will execute in the browser of any user opening the invoice form. |
|---|
| Источник | ⚠️ https://gist.github.com/higordiego/dd7f841bbd1b8b951434511d044f7c6e |
|---|
| Пользователь | c4ttr4ck (UID 75518) |
|---|
| Представление | 09.04.2026 03:49 (5 месяцы назад) |
|---|
| Модерация | 26.04.2026 16:45 (18 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 359711 [code-projects Invoice System in Laravel 1.0 /item item name/description межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|