CVE-2020-10107 – PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS,

5 years ago

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10107

Reference (s):

https://frostylabs.net/writeups/cve-2020-10107/