| 标题 | SourceCodester Road Accident Map Marker 1.0 Cross Site Scripting |
|---|
| 描述 | The user input for the field `details` of the endpoints/add-marker.php is not escaped properly resulting in a XSS vulnerability. It is possible to initiate the attack remotely.
The previous submit was by accident with a private repo |
|---|
| 来源 | ⚠️ https://www.singto.io/pocsforexploits/accident_marker_xss.md |
|---|
| 用户 | Jelle Janssens (UID 81048) |
|---|
| 提交 | 2025-02-01 06時38分 (2 年前) |
|---|
| 管理 | 2025-02-01 19時56分 (13 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 289712 [SourceCodester Road Accident Map Marker 1.0 /endpoint/add-mark.php mark_name/details 跨网站脚本] |
|---|
| 积分 | 0 |
|---|