| tiêu đề | CodeAstro Food Ordering System in PHP CodeIgniter 18/2021 Cross Site Scripting |
|---|
| Mô tả | A critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the stores section of Food Ordering System in PHP CodeIgniter.
Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the profile page is viewed. |
|---|
| Nguồn | ⚠️ https://github.com/Vanshdhawan188/Food-Ordering-System-in-PHP-CodeIgniter-/blob/main/Stored%20Cross-Site%20Scripting%20(XSS).md |
|---|
| Người dùng | Subhash Paudel (UID 66830) |
|---|
| Đệ trình | 08/06/2025 17:24 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 15/06/2025 12:42 (7 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 312600 [CodeAstro Food Ordering System 1.0 POST Request Parameter /admin/store/edit/ Restaurant Name/Address Tập lệnh chéo trang] |
|---|
| điểm | 18 |
|---|