CVE-2021-42664

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description…

published November 5, 2021

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01674 · 76.7th percentile
Published
2021-11-05T12:19Z
EPSS history
Timeline
  • 05 NOV 12:19Z
    A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description…
    cvelistv5