SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
syguestbook a5 project syguestbook a5 1.2 |