Medium severity5.4NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026

CVE-2021-29388

Description

A stored cross-site scripting (XSS) vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sourcecodester/Budget Management Systemllm-fuzzy
Range: 1.0
SourceCodester/Budget Management Systemdescription
Budget Management System Project/Budget Management System
cpe:2.3:a:budget_management_system_project:budget_management_system:1.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/49723nvdThird Party AdvisoryVDB Entry
www.sourcecodester.com/php/14403/budget-management-system.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000