PHPJabbers Cleaning Business Software Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in PHPJabbers Cleaning Business Software version 1.0. This vulnerability allows attackers to inject malicious scripts into parameters that are permanently stored on the server. The issue arises in the 'c_name' and 'name' parameters within the application.

Impact

Exploitation of this vulnerability allows for multiple stored cross-site scripting attacks, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, log into the admin panel of PHPJabbers Cleaning Business Software version 1.0. Navigate to the 'System Users' menu and select 'Add User'. In the 'Name' input field, enter a script payload and save the changes. The injected script will execute, demonstrating the cross-site scripting vulnerability.