| Title | SourceCodester CMS 1 Cross Site Scripting |
|---|
| Description | In Version 1.0 of the Simple Client Management System, Stored Cross-Site Scripting can be performed via 'save_service' function within the 'master.php' file when creating a new service within the maintenance section of the administrative console via the of the application service list component. An attacker can supply malicious commands to be stored within the 'name' and 'description' parameters and executed when a user navigates to the 'cms/admin/?page=maintenance/services.php' page |
|---|
| Source | ⚠️ https://github.com/cl4irv0yance/CVEs/issues/2 |
|---|
| User | mdsmith49 (UID 72657) |
|---|
| Submission | 07/29/2024 19:22 (2 years ago) |
|---|
| Moderation | 07/30/2024 19:57 (1 day later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 216509 [SourceCodester Simple Client Management System 1.0 Input Field Master.php name/description cross site scripting] |
|---|
| Points | 0 |
|---|