Persistent Cross-Site Scripting Vulnerability in Sourcecodester Stock Management System
CVE-2020-24198

6.1MEDIUM

Key Information:

Vendor: Stock Management System Project
Status: Stock Management System
Vendor: CVE Published:; 9 September 2020

🔔 Create Stock Management System Project Vulnerability Alert

What is CVE-2020-24198?

A persistent cross-site scripting vulnerability exists in the Sourcecodester Stock Management System v1.0, enabling remote attackers to inject arbitrary web scripts or HTML through unvalidated input in the 'Brand Name' field. This vulnerability poses a risk of data compromise and manipulation on affected systems, allowing attackers to execute malicious scripts each time the affected data is accessed.

References

https://www.sourcecodester.com/php/14366/stock-management...

https://cxsecurity.com/issue/WLB-2020090024

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2020
Vulnerability Reserved
Aug 13, 2020

CVE-2020-24198 Data

JSON