CVE-2021-40909

PoC —

CVSS 3.1

9.6 critical

EPSS

2%p81

Published

Jan 24, 2022 (Jan 24, 2022)

Modified

Jun 17, 2026

Description

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

Vendors: php crud without refresh\/reload using ajax and datatables tutorial project
Products: php crud without refresh\/reload using ajax and datatables tutorial
Weakness: CWE-79, CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.