CVE-2021-40260

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.
References
Link Resource
https://sisl.lab.uic.edu/projects/chess/tailor-management/ Exploit Third Party Advisory Tool Signature
Configurations

Configuration 1 (hide)

cpe:2.3:a:tailor_management_system_project:tailor_management_system:1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-11-08 21:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-40260

Mitre link : CVE-2021-40260

CVE.ORG link : CVE-2021-40260


JSON object : View

Products Affected

tailor_management_system_project

  • tailor_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')