Threats tagged 'ghsa-658x-88gh-x9f8'

A cross-site scripting (XSS) vulnerability exists in the blog-details.php component of Hiruna Gallage's Glamour Salon Management System version 1. This flaw allows remote attackers to inject arbitrary web scripts or HTML through the blog comment section parameter, potentially leading to script execution in users' browsers. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level. No patch or remediation information is currently available, and there are no known exploits in the wild.