Millhouse Project Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in Millhouse Project version 1.414. This issue arises in the comment submission feature, where attackers can inject malicious scripts into comments. The vulnerability is exploited by embedding JavaScript in the 'content' parameter of the add_comment_sql.php file, which is then executed in the browsers of users viewing the comments.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of the user viewing the comments.

Reproduction

To reproduce this vulnerability, post a comment on the blog using the comment submission feature. Inject a script, such as a JavaScript alert, into the 'content' parameter. Once the comment is submitted, the injected script will be executed in the browser of anyone who views the post.