CVE:CVE-2021-46080
CNNVD:CNNVD-202201-433
Sourcecodester Vehicle Service Management System是开源的一个PHP 项目。用于汽车维修/服务店或企业的简单 Web 应用程序。
Sourcecodester Vehicle Service Management System 1.0版本存在跨站脚本漏洞，该漏洞源于系统缺少对于跨站请求伪造的token的验证。攻击可能会导致存储的跨站点脚本漏洞。
solution:Upgrade vehicle_service_management_system_project vehicle_service_management_system to a higher version than 1.0,and avoid the version (,1.0]