medium5.4
CVE-2021-29388
A stored cross-site scripting (XSS) vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in …
Impact
A stored cross-site scripting (XSS) vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Budget Management System Project | Budget Management System | Version 1.0 |