| 标题 | PHPGurukul Small CRM 4.0 Cross Site Scripting |
|---|
| 描述 | A critical Stored Cross-Site Scripting (XSS) vulnerability exists in PHPGurukul's Small CRM (v4.0) within the profile update functionality. Attackers can inject persistent malicious scripts via the name parameter in profile.php, which execute when victims view their profile. |
|---|
| 来源 | ⚠️ https://github.com/Ant1sec-ops/small-crm-4.0-stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| 用户 | Subhash Paudel (UID 66830) |
|---|
| 提交 | 2025-05-31 10時41分 (1 年前) |
|---|
| 管理 | 2025-06-04 12時13分 (4 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 295137 [PHPGurukul Small CRM 3.0 profile.php name 跨网站脚本] |
|---|
| 积分 | 0 |
|---|