Record summary

CVE-2021-29388 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.

Description

A stored cross-site scripting (XSS) vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBBudget Management System 1.0 - 'Budget title' Stored XSSExploitDB exploitby Jitendra Kumar TripathiNot analyzed1 file
ExploitDB

PoC details

References

3