CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

The CVE-2021-46080 entry refers to Vehicle Service Management System 1.0 and describes a CSRF flaw that enables a stored XSS vulnerability. Public sources (CNVD/CNNVD and NVD) attribute the issue to forged-token validation failures in cross-site requests, leading to stored XSS when an attacker lu...