Bank Locker Management System Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in the Bank Locker Management System by PHPGurukul. This issue arises in the search.php component, specifically through the /search parameter. The vulnerability allows for the injection of unsanitized HTML and JavaScript, which can be executed in the context of the user's browser. Potential consequences include session cookie theft, unauthorized redirection to malicious sites, and manipulation of the displayed page.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting, allowing for the execution of injected scripts in the user's browser. This could result in the theft of session cookies, unauthorized redirections to malicious websites, manipulation of web pages, and phishing attacks through injected forms.