SourceCodester Safety Anger Pad Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Safety Anger Pad version 1.0. The issue arises from an unknown function that improperly handles the 'angerDisplay' argument, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely and requires user interaction.
Impact
Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.
Reproduction
To reproduce this vulnerability, send a request that includes a payload in the 'angerDisplay' argument. The payload should be crafted to exploit the cross-site scripting vulnerability, such as by including an image tag with an 'onerror' event.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
