Security Advisory
CVE-2021-40909
9.6
CRITICAL
Vulnerability Description
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
Published Date
January 24, 2022
Official Source
NIST NVD Advisory