CVE-2022-26295

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

CVE-2022-26295

CVE-2022-26295 is a stored XSS vulnerability in Online Project Time Management System v1.0, exploitable via /ptms/?page=user by injecting payload into the user name field. The core issue is lack of input validation/filtering and unsafe output handling for user-supplied data. Multiple connected so...