vendor:
Library Management System
by:
Kislay Kumar
7.5
CVSS
HIGH
Stored XSS
79
CWE
Product Name: Library Management System
Affected Version From: 3.0
Affected Version To: 3.0
Patch Exists: NO
Related CWE: N/A
CPE: a:otsglobal:library_management_system:3.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Kali Linux
2020
Library Management System 3.0 – ‘Add Category’ Stored XSS
Login as Admin, select 'Book' from menu and select 'Categories' from sub menu and after that click on 'Add Category'. Insert payload - '><img src onerror=alert(1)> in 'Category Name'. Now click on 'Save', go to 'Category' and see last, there you will get alert box.
Mitigation:
Input validation and output encoding should be used to prevent XSS attacks.