CVSS 3.1
9.6 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HCVE-2021-40909
Critical (9.6) in php crud without refresh\/reload using ajax and datatables tutorial project php crud without refresh\/reload using ajax and datatables tutorial. EPSS 2.2% chance of exploitation in the next 30 days.
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
Severity
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_project:php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial