CVE-2024-42787

A Stored Cross-Site Scripting (XSS) vulnerability exists in Kashipara Music Management System v1.0 within the /music/ajax.php?action=save_playlist endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data in the title and description parameter fields. Remote a...