CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . An authenticated attacker can inject malicious JavaScript payloads through the vehicalorcview parameter in the /admin/edit-vehicle.php endpoint. These payloads are persisted in the system and execute w...