CVE-2022-30482

Name of the Vulnerable Software and Affected Versions Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0

Description The issue concerns a Cross Site Scripting (XSS) problem. It occurs in the "admin/add cata.php" endpoint via the ctg name parameters. This allows for potential malicious script injection.

Recommendations For Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0, consider validating and sanitizing the ctg name parameters in the "admin/add cata.php" endpoint to prevent XSS attacks. As a temporary workaround, restrict access to the "admin/add cata.php" endpoint until a proper fix is applied.