CVE-2022-41358

This exploit demonstrates a stored XSS vulnerability in Garage Management System 1.0 by bypassing client-side validation via a crafted POST request to the `createCategories.php` endpoint. The payload injects a malicious script into the `categoriesName` parameter, which is then stored and executed in the context of the application.

This PoC demonstrates a stored XSS vulnerability in Garage Management System 1.0 by bypassing client-side validation via Burp Suite. The exploit modifies the 'categoriesName' parameter to inject a malicious script, which is then stored and executed in the application.