Stored XSS Vulnerability in BDTASK Multi-Store Inventory Management System

CVE-2020-36012

What is CVE-2020-36012?

A stored cross-site scripting vulnerability exists in BDTASK Multi-Store Inventory Management System 1.0, allowing a local admin to inject arbitrary scripts through the Customer Name Field. If exploited, this could enable an attacker to execute malicious scripts on the victim's browser, potentially leading to data theft, session hijacking, and further exploitation of the application. Organizations must ensure that input sanitization and output encoding mechanisms are effectively implemented to defend against such vulnerabilities.

References