| tiêu đề | code-projects Simple Food Ordering System 1.0 Cross Site Scripting |
|---|
| Mô tả | During the security assessment of "Simple Food Ordering System Project", I detected a critical stored cross-site scripting vulnerability in the "addcategory.php" file. This vulnerability occurs due to inadequate input sanitization for user-controllable data that is stored and later displayed without proper output encoding. Attackers can inject malicious scripts that remain on the server and execute automatically when legitimate users browse the affected pages. This can result in unauthorized actions being performed on behalf of authenticated users, theft of sensitive information, and complete compromise of user sessions. Immediate remediation is required to prevent widespread impact. |
|---|
| Nguồn | ⚠️ https://github.com/underatted/CVE/issues/20 |
|---|
| Người dùng | underatted (UID 90321) |
|---|
| Đệ trình | 15/10/2025 10:18 (cách đây 6 các tháng) |
|---|
| Kiểm duyệt | 26/10/2025 17:59 (11 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 329972 [code-projects Simple Food Ordering System 1.0 /addcategory.php cname Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|