Chuckbartowski7

The software is susceptible to SQL Injection in the 'admin/view customer.php' file through the `ID` parameter. This allows for potential unauthorized access or modification of data.

The software is susceptible to a Stored Cross-Site Scripting (XSS) issue because of insufficient input sanitization. Specifically, the `Nombre:Producto` parameter lacks proper validation, enabling an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript. The affected parameter is the product name.

The application is susceptible to a Cross-Site Scripting (XSS) issue in the 'Enter URLs to check' input field. This allows a remote attacker to execute arbitrary code. The vulnerable parameter is the `URLs` input.

The software is susceptible to Cross Site Scripting (XSS) attacks. The issue occurs in the '/admin/profile.php' component through the `fname` (First Name) and `lname` (Last Name) fields. Successful exploitation could allow an attacker to inject malicious scripts into the web page viewed by other users.

The software is susceptible to SQL Injection through the `id` parameter in the 'profile/edit.php' page. This allows for potential unauthorized access or modification of data. The affected API endpoint is '/profile/edit.php'. The vulnerable parameter is `id`.

The software is susceptible to a Cross-Site Scripting (XSS) issue in the "Markdown Input" field. A remote attacker can inject arbitrary HTML/JavaScript code that will execute in the victim’s browser when the "Convert to HTML" button is clicked. The vulnerable parameter is `Markdown Input`.