PT-2020-15589

Name of the Vulnerable Software and Affected Versions SourceCodester Stock Management System version 1.0 Description A Reflected Cross-Site Scripting XSS issue in the index.php login-portal webpage allows remote attackers to harvest login credentials and session cookies when an unauthenticated...

CVE-2020-23835: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing...