CVE-2021-40577

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0

Description A Stored Cross Site Scripting (XSS) issue exists in the Add-Users page via the Name parameter, allowing a remote attacker to perform cross-site scripting attacks.

Recommendations For Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0, consider disabling the Name parameter in the Add-Users page as a temporary workaround until a patch is available. Restrict access to the Add-Users page to minimize the risk of exploitation. Avoid using the Name parameter in the affected page until the issue is resolved.