CVE-2021-40909

2022-01-2415:15:05

mitre

www.cve.org

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.