| Title | SourceCodester Road Accident Map Marker 1.0 Cross Site Scripting |
|---|
| Description | The user input for the field `details` of the endpoints/add-marker.php is not escaped properly resulting in a XSS vulnerability. It is possible to initiate the attack remotely.
The previous submit was by accident with a private repo |
|---|
| Source | ⚠️ https://www.singto.io/pocsforexploits/accident_marker_xss.md |
|---|
| User | Jelle Janssens (UID 81048) |
|---|
| Submission | 02/01/2025 06:38 (2 years ago) |
|---|
| Moderation | 02/01/2025 19:56 (13 hours later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 289712 [SourceCodester Road Accident Map Marker 1.0 /endpoint/add-mark.php mark_name/details cross site scripting] |
|---|
| Points | 0 |
|---|