Skip to content

Cross site scripting (XSS) vulnerability in...

Critical severity Unreviewed Published Jan 25, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

References

Published by the National Vulnerability Database Jan 24, 2022
Published to the GitHub Advisory Database Jan 25, 2022
Last updated Feb 3, 2023

Severity

Critical

EPSS score

0.372%
(74th percentile)

Weaknesses

CVE ID

CVE-2021-40909

GHSA ID

GHSA-vqxh-g4gf-cp2w

Source code

No known source code

Dependabot alerts are not supported on this advisory because it does not have a package from a supported ecosystem with an affected and fixed version.

Learn more about GitHub language support

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.