vendor:
Laundry Booking Management System
by:
Azumah Foresight Xorlali
8,8
CVSS
HIGH
Stored Cross-Site Scripting (XSS)
79
CWE
Product Name: Laundry Booking Management System
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Kali Linux
2021
Laundry Booking Management System 1.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
A stored cross-site scripting (XSS) vulnerability exists in Laundry Booking Management System 1.0. An attacker can inject malicious JavaScript code into the application by entering it into the address box or pasting it into the firstname and lastname fields. When a user visits the affected page, the malicious code will be executed in the user's browser.
Mitigation:
Input validation should be used to prevent malicious code from being injected into the application. Additionally, the application should be configured to use a Content Security Policy (CSP) to prevent malicious code from being executed.
