VULNERABILITY INTELLIGENCE

CVE-2021-40260

CVSS score6.1 MEDIUM

EPSS probability0.66%

CISA KEVNot currently listed

Published2021-11-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.

Weakness classification

nvd@nist.gov: CWE-79

Primary references

cve@mitre.org — Exploit, Third Party Advisory, Tool Signature
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, Tool Signature