Description
Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xeroneit | Xeroneit Library Management System | ≤ 3.1 | — |
References
- ExploitDB-49292 exploit
- Vendor Homepage product
- Software Product Page product
- VulnCheck Advisory: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS third-party-advisory