CVE-2020-10107 – PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS,

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10107

Reference (s):

• https://frostylabs.net/writeups/cve-2020-10107/