PT-2021-5955
CVE-2021-40577
·
تاريخ النشر
2021-08-31
·
تاريخ التحديث
2021-12-03
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0
Description
A Stored Cross Site Scripting (XSS) issue exists in the Add-Users page via the
Name parameter, allowing a remote attacker to perform cross-site scripting attacks.Recommendations
For Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0, consider disabling the
Name parameter in the Add-Users page as a temporary workaround until a patch is available. Restrict access to the Add-Users page to minimize the risk of exploitation. Avoid using the Name parameter in the affected page until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾