Cross site scripting

2020-03-0513:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.

CPENameOperatorVersion
daily_expense_tracker_systemeq1.0

CPE	Name	Operator	Version
	daily_expense_tracker_system	eq	1.0

References

frostylabs.net/writeups/cve-2020-10107/