CVE-2021-41962

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

CVE-2021-41962

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

CVE-2021-41962

Affected software: Sourcecodester Vehicle Service Management System 1.0 (open source PHP project). Vulnerability vector / component: Cross-Site Scripting (XSS) via the Owner fullname parameter in a Send Service Request within vehicle_service. Root cause (as stated): lack of data validation/filter...