medium5.4
CVE-2020-10107
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
Impact
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Daily Expense Tracker System | Version 1.0 |