CVE-2021-40260

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management version 1.0

Description Multiple Cross Site Scripting (XSS) vulnerabilities exist in the software. The vulnerabilities are found in the eid parameter in partedit.php and customeredit.php, the id parameter in editmeasurement.php and addpayment.php, and the error parameter in index.php.

Recommendations For version 1.0, consider disabling access to the vulnerable parameters eid, id, and error in the respective files until a patch is available. Restrict access to the affected API endpoints, specifically partedit.php, customeredit.php, editmeasurement.php, addpayment.php, and index.php, to minimize the risk of exploitation. Avoid using the parameters eid, id, and error in the affected files until the issue is resolved.