| Title | SourceCodester rental management system 1.0 Stored Cross-Site Scripting(XSS) |
|---|
| Description | #Accounts Manager App Stored Cross-Site Scripting(XSS)
#Description
The system Client doesn't properly sanitise POST parameter, which result into a Stored Cross-Site Scripting(XSS).
#Vendor Homepage
https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html
#Author
lsi.webray.com.cn inc
#Proof of Concept |
|---|
| Source | ⚠️ https://github.com/lscjl/lsi.webray.com.cn/blob/main/CVE-project/rental%20management%20system%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| User | wsfw (UID 44064) |
|---|
| Submission | 08/14/2024 10:57 (2 years ago) |
|---|
| Moderation | 08/14/2024 20:30 (10 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 274708 [SourceCodester Best House Rental Management System 1.0 POST Parameter ajax.php?action=save_tenant lastname cross site scripting] |
|---|
| Points | 18 |
|---|