PT-2024-20288 · Sourcecodester · Sourcecodester Product Inventory With Export To Excel
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Sourcecodester Product Inventory with Export to Excel version 1.0
Description
The issue concerns cross-site scripting (XSS) attacks. Specifically, the Product Name and Product Code in the 'Add Product' section are vulnerable to such attacks.
Recommendations
For version 1.0, consider validating and sanitizing user input for the
Product Name and Product Code fields to prevent XSS attacks. As a temporary workaround, restrict access to the 'Add Product' section until a proper fix is implemented.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Product Inventory With Export To Excel