Code-Projects Document Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Document Management System version 1.0. This issue allows attackers to steal admin cookie information by injecting malicious XSS code into the Company field while uploading files.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts can be executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, an admin user must add a document and enter a script tag containing JavaScript code, such as an alert command, into the Company field. Once the document is saved, the injected script will execute, demonstrating the XSS vulnerability by accessing and alerting the admin's cookie information.