CVE-2022-30460: Improper Neutralization of Input During Web Page Generation

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

PT-2022-20127

Name of the Vulnerable Software and Affected Versions Simple Social Networking Site version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/sns/classes/Users.php?f=save" by manipulating the firstname variable. This allows an...