PT-2021-22581

Name of the Vulnerable Software and Affected Versions: PHPGurukul Shopping version 3.1 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the software. The issues are found in the callback parameter in several API endpoints: "server side/scripts/id jsonp.php", "server...

CVE-2021-39412: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exists in PHPGurukul Shopping v3.1 via the 1 callback parameter in a serverside/scripts/idjsonp.php, b serverside/scripts/jsonp.php, and c scripts/objectsjsonp.php, the 2 value parameter in examplessupport/editableajax.php, and the 3 PHPSELF...

devimadesign.com XSS vulnerability

Vulnerable URL: http://www.devimadesign.com/corso-html5/webworker/jsonp.php?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...