← Database

CVE-2021-40909

CRITICAL CVSS: 9.6 Published: 2022-01-24 Modified: 2026-06-17

Description

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

Affected Platforms

Php Crud Without Refresh\/Reload Using Ajax And Datatables Tutorial Project Php Crud Without Refresh\/Reload Using Ajax And Datatables Tutorial

Weakness Type

CWE-79, CWE-89

References