Sourcecodester Online ID Generator System Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Sourcecodester Online ID Generator System version 1.0. The issue arises in the Users.php file within the id_generator/classes directory, specifically through the POST parameters 'firstname' and 'lastname'. This vulnerability allows injected scripts to be executed in the context of the user.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, log into the application as an admin. Navigate to the user management page and insert a script payload into the 'First Name' and 'Last Name' fields. After submitting the form, the injected scripts will be executed, demonstrating the cross-site scripting vulnerability.