Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Exploit Title: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...

CVE-2021-46072

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:23+00:00| seen| https://t.me/cibsecurity/35065 2022-01-14 19:31:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1328 2022-01-14 19:39:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1329 2023-04-27...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

CVE-2021-46072

CVE-2021-46072 affects Vehicle Service Management System 1.0, with a stored cross-site scripting (XSS) vulnerability in the Service List section of the login panel. The issue arises from insufficient input filtering/escaping, enabling attacker-supplied payloads to be stored and later executed by ...