Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Título del Exploit: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Autor del Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Referencias: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2021-46073

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:20+00:00| seen| https://t.me/cibsecurity/35063 2022-01-14 19:52:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1330 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-46073

Vehicle Service Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the User List section of the login panel. The root cause is insufficient input filtering/escaping in that area, enabling stored XSS. Impact per sources includes injection of malicious scripts into pages v...