A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-11-05T12:19:00
Updated: 2024-08-04T03:38:50.089Z
Reserved: 2021-10-18T00:00:00
Link: CVE-2021-42664
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-05T13:15:08.670
Modified: 2024-11-21T06:27:56.767
Link: CVE-2021-42664
Redhat
No data.