boku7/tailorMS-rXSS-Keylogger

boku7/tailorMS-rXSS-Keylogger

Releases0
Stars24
Reflected Cross-Site Scripting (XSS) vulnerability in 'index.php' login-portal webpage of SourceCodesters Tailor Management System v1.0 allows remote attackers to harvest keys pressed via unauthenticated victim clicking malicious URL and typing.

CVE History

CVEPublishedCVSS v3CVSS v2
6.4 MEDIUM4.3 MEDIUM

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.