SourceCodester Pizzafy Ecommerce System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Pizzafy Ecommerce System version 1.0. The issue arises in the 'save_user' function within '/admin/ajax.php?action=save_user'. By manipulating the 'Name' argument, an attacker can inject malicious scripts, which could be executed in the context of the user's browser. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.