| Title | https://code-projects.org/ https://code-projects.org/pharmacy-management-system-in-php-with-source-code/ 1.0 Stored XSS |
|---|
| Description | To exploit stored XSS vulnerability, attackers inject script into the user input fields.For example, submitting the payload <script>alert(1)</script> in the user input field (updateprofile) and saving the data.
Application does not properly sanitize or validate the input, this script executed in the user’s browser, leading to an XSS attack. |
|---|
| User | vulrep (UID 71951) |
|---|
| Submission | 08/27/2024 17:41 (2 years ago) |
|---|
| Moderation | 08/31/2024 07:35 (4 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 276261 [code-projects Pharmacy Management System 1.0 Update My Profile Page index.php?id=userProfileEdit fname/lname/email cross site scripting] |
|---|
| Points | 16 |
|---|