Oretnom23: Security Vulnerabilities
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.
CVSS Score
6.1
EPSS Score
0.006
Published
2021-11-03
Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .
CVSS Score
8.8
EPSS Score
0.103
Published
2021-10-29
Page 69