CVE-2020-25761

CVE-2020-25761 affects the Projectworlds Visitor Management System in PHP 1.0. The vulnerability is an unauthenticated cross-site scripting (XSS) flaw in the file myform.php due to lack of input validation on request parameters. An attacker can inject JavaScript payloads via parameters, potential...

Visitor Management System In PHP 1.0 Cross Site Scripting

Title: Visitor Management System in PHP 1.0 - Unauthenticated Stored XSS Exploit Author: Rahul Ramkumar Date: 2020-09-16 Vendor Homepage: https://projectworlds.in Software Link: https://projectworlds.in/wp-content/uploads/2020/07/Visitor-Management-System-in-PHP.zip Version: 1.0 Tested On: Window...