CVE-2020-5308

Name of the Vulnerable Software and Affected Versions PHPGurukul Dairy Farm Shop Management System version 1.0

Description The issue allows for XSS attacks, as demonstrated by the category and CategoryCode parameters in "add-category.php", the CompanyName parameter in "add-company.php", and the ProductName parameter in "add-product.php".

Recommendations For PHPGurukul Dairy Farm Shop Management System version 1.0, consider validating and sanitizing user input for the category, CategoryCode, CompanyName, and ProductName parameters to prevent XSS attacks. As a temporary workaround, restrict access to the "add-category.php", "add-company.php", and "add-product.php" pages until a proper fix is applied.