PT-2022-11860 · Unknown · Sourcecodester Simple Client Management System

Sentinal920 · Published 2022-03-31 · Updated 2022-04-06 · CVE-2021-43505

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ssourcecodester Simple Client Management System version 1

Description Multiple Cross Site Scripting (XSS) vulnerabilities exist in the system via the Add new Client and Add new invoice features.

Recommendations For Ssourcecodester Simple Client Management System version 1, consider disabling the Add new Client and Add new invoice features until a patch is available to prevent potential exploitation. Restrict access to these features to minimize the risk of XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-43505

Affected Products

Sourcecodester Simple Client Management System

References · 5

• 🔥 https://raw.githubusercontent.com/Sentinal920/Findings/main/Simple%20Client%20Management%20System/xss.txt · Exploit
• https://osv.dev/vulnerability/CVE-2021-43505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43505 · Security Note
• https://t.me/cvenotify/28215 · Telegram Post
• https://t.me/cibsecurity/39927 · Telegram Post