PT-2021-18391

Name of the Vulnerable Software and Affected Versions CourseMS version 2.1 Description The issue allows an attacker with Admin account access to create a Job Title in the Site area, specifically through the name parameter in admin/add jobs.php, and insert a cross-site scripting XSS payload. This...