vendor:
Online Farm Management System
by:
KeopssGroup0day,Inc
9.3
CVSS
HIGH
Persistent Cross-Site Scripting
79
CWE
Product Name: Online Farm Management System
Affected Version From: 0.1.0
Affected Version To: 0.1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:sourcecodester:online_farm_management_system:0.1.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Kali Linux
2020
Online Farm Management System 0.1.0 – Persistent Cross-Site Scripting
Online Farm Management System 0.1.0 is vulnerable to Persistent Cross-Site Scripting. An attacker can inject malicious JavaScript code into the review page of the application. This code will be executed in the browser of the victim when the page is loaded. The malicious code can be used to steal the session of the victim, redirect the victim to a malicious website, or perform other malicious activities.
Mitigation:
Input validation should be used to prevent the injection of malicious code. The application should validate all user input and reject any input that contains malicious code.
