Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4cq8-w5ch-hhg7

Опубликовано: 30 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

EPSS

Процентиль: 17%
0.00252
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
6 месяцев назад

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

EPSS

Процентиль: 17%
0.00252
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79