A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function.
References
Configurations
History
23 Oct 2024, 18:05
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:code-projects:simple_admin_panel:1.0:*:*:*:*:*:*:* | |
References | () https://github.com/BurakSevben/CVEs/blob/main/Supplier%20Managment%20System/Supplier%20Managment%20System%20-%20SQL%20Injection.md - Not Applicable | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
First Time |
Code-projects simple Admin Panel
Code-projects |
|
CWE | CWE-79 |
14 Feb 2024, 16:13
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-14 15:15
Updated : 2024-10-23 18:05
NVD link : CVE-2024-25226
Mitre link : CVE-2024-25226
CVE.ORG link : CVE-2024-25226
JSON object : View
Products Affected
code-projects
- simple_admin_panel
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')