• info
• discussion
• exploit
• solution
• references

Eprayer Your Name Field HTML Injection Vulnerability

Eprayer is prone to an HTML-injection vulnerability because it fails to properly sanitize HTML and script code from user-supplied input to the prayer request form.

An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.