Description
SQL injection and cross-site scripting (XSS) vulnerabilities exist in EasyDynamicPages. Input parameters are not properly sanitized before being used in database queries and HTML output.
Impact
SQL injection allows attackers to extract, modify, or delete database contents. XSS enables session hijacking and credential theft from other users.
Solution
Apply input validation and parameterized queries. Use output encoding for all user-supplied data.