CVE-2021-40260

Published: Nov 8, 2021Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.

Affected (1)

Products: Tailor Management System Project: Tailor Management System

Tailor Management System Project

1 product

Tailor Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tailor Management System Project Tailor Management System	Version 1.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://sisl.lab.uic.edu/projects/chess/tailor-management/

Source: cve@mitre.org

ExploitThird Party AdvisoryTool Signature

https://sisl.lab.uic.edu/projects/chess/tailor-management/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryTool Signature

Timeline

No history available yet.