CVE-2021-27544

published 2021-04-15

CVE-2021-27544: Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary…

medium 4.8 CVSS 3.1

AV N AC L PR H UI R S C C L I L A N

Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	beauty_parlour_management_system	—	—

CWE-79