Threats tagged 'ghsa-395c-4p59-c3px'

SourceCodester Photo Share Website 1.0 contains a cross-site scripting (XSS) vulnerability in the Comment Input Box component, specifically in the /social/ajax.php?action=save_upload file. This vulnerability arises from improper handling of the 'content' argument, allowing remote attackers to inject malicious scripts. Exploit code is publicly available. The vulnerability has a low CVSS score of 3.5, indicating limited impact.