| 标题 | SourceCodester Take-Note App v1.0 has DOM-XSS Vulnerabilities |
|---|
| 描述 | DOM-based XSS (Cross-Site Scripting) attacks typically occur within JavaScript code when an application handles user input in an unsafe manner and dynamically injects it into the DOM.
After testing, the SourceCodester Take-Note App v1.0 has been confirmed that the existence of a DOM-XSS vulnerability and currently there is no patch released by the developers. |
|---|
| 来源 | ⚠️ https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/ |
|---|
| 用户 | gikaku (UID 53862) |
|---|
| 提交 | 2023-09-05 02時31分 (3 年前) |
|---|
| 管理 | 2023-09-09 09時23分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 239349 [SourceCodester Take-Note App 1.0 index.php noteContent 跨网站脚本] |
|---|
| 积分 | 18 |
|---|