CVE-2023-1688

The CVE-2023-1688 entry concerns SourceCodester Earnings and Expense Tracker App 1.0. The issue is a cross-site scripting vulnerability caused by manipulation of the name parameter in Master.php?a=save_expense, enabling remote initiation. Affected component: Master.php?a=save_expense endpoint in ...