Sourcecodester House Rental Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Sourcecodester House Rental Management System version 1.0. The issue is located in the 'rental/manage_categories.php' file, where user input is not properly sanitized, allowing for the injection of malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to 'ajax.php' with the action 'save_category'. Include a script tag in the 'name' field. The injected script will be executed, demonstrating the cross-site scripting vulnerability.