CX Stored_XSS @ WebSite/BlogCreate.aspx.cs [master] #2
Description
Stored_XSS issue exists @ WebSite/BlogCreate.aspx.cs in branch master
Method btnSubmit_Click at line 15 of WebSite\BlogCreate.aspx.cs gets data from the database, for the ExecuteReader element. This element’s value then flows through the code without being properly filtered or encoded and is eventually displayed to the user in method btnSubmit_Click at line 15 of WebSite\BlogCreate.aspx.cs. This may enable a Stored Cross-Site-Scripting attack.
Severity: High
CWE:79
Vulnerability details and guidance
Lines: 28
var dataReader = insertCommand.ExecuteReader();