SingMR HouseRent Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SingMR HouseRent version 1.0. The issue arises in the file '/toAdminUpdateHousePage?hID=30', where unknown code can be manipulated to inject malicious scripts. This vulnerability can be exploited remotely and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, access the '/toAdminUpdateHousePage?hID=30' endpoint without logging in. Insert a script tag containing a JavaScript payload, such as an alert, and then navigate to the '/toIndexPage' endpoint. The injected script will be executed, demonstrating the cross-site scripting vulnerability.