Cross Site Scripting Vulnerability in SourceCodester Simple CRM System
CVE-2023-24203

5.4MEDIUM

Key Information:

Vendor
SourceCodester
Status
Simple Customer Relationship Management System
Vendor
CVE Published:
14 May 2024

Summary

A Cross Site Scripting vulnerability exists in the SourceCodester Simple Customer Relationship Management System v1.0 that allows an attacker to execute arbitrary code. This vulnerability is exploited through unvalidated inputs in the company or query parameter(s), enabling potential security breaches. Ensuring input sanitization and validation can mitigate the risks associated with this vulnerability.

References

https://www.sourcecodester.com
https://momonguyen.com/2023/cve-2023-24203/
https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-2...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.