CVE:CVE-2023-3184
CNNVD:CNNVD-202306-711
Sales Tracker Management System是Carlo Montero个人开发者的一个销售跟踪管理系统。
Sales Tracker Management System 1.0版本存在跨站脚本漏洞，该漏洞源于文件/classes/Users.php?f=save存在问题，对参数firstname/middlename/lastname/username的错误操作会导致跨站脚本编写。
solution:Upgrade sales_tracker_management_system_project sales_tracker_management_system to a higher version than 1.0,and avoid the version 1.0