| Title | code-projects Responsive Blog Site 1.0 Reflected XSS |
|---|
| Description | In the search.php page, the search keyword "search_keyword" submitted by the user is directly concatenated into the response page in HTML format without undergoing any HTML entity encoding or filtering. An attacker can construct malicious input, causing the browser to parse and execute the injected JavaScript code. |
|---|
| Source | ⚠️ https://github.com/kbhjt/cve/issues/2 |
|---|
| User | kbhjt (UID 88144) |
|---|
| Submission | 07/20/2025 10:25 (1 Year ago) |
|---|
| Moderation | 07/21/2025 09:44 (23 hours later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 313345 [code-projects Responsive Blog 1.0 /search.php keyword cross site scripting] |
|---|
| Points | 0 |
|---|