medium5.4
CVE-2021-25204
Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subje…
Impact
Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Commerce Website Project | E-Commerce Website | Version 1.0 |