CVE-2021-26304

Name of the Vulnerable Software and Affected Versions PHPGurukul Daily Expense Tracker System version 1.0

Description The issue concerns a stored XSS vulnerability via the "Item" parameter in the "add-expense.php" endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of affected devices or real-world incidents.

Recommendations For PHPGurukul Daily Expense Tracker System version 1.0, consider restricting access to the "add-expense.php" endpoint until a fix is available, and avoid using the Item parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.