Security Advisory

CVE-2021-27544

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-15 11:53:36
Last updated 2024-08-03 21:26:09
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.