CVE-2021-40909: PHP Crud Without Refresh/reload Using AJAX And Datatables Tutorial Project PHP Crud Without Refresh/reload Using AJAX And Datatables Tutorial

Critical severity, CVSS 9.6. EPSS: 2.2% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

Affected products

• PHP Crud Without Refresh/reload Using AJAX And Datatables Tutorial Project PHP Crud Without Refresh/reload Using AJAX And Datatables Tutorial: version 1.0 only

Published 2022-01-24. Last modified 2026-06-17.