critical9.6
CVE-2021-40909
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote at…
Impact
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Crud Without Refresh\/Reload Using Ajax And Datatables Tutorial Project | Php Crud Without Refresh\/Reload Using Ajax And Datatables Tutorial | Version 1.0 |