Cross Site Scripting Vulnerability in Farmacia 1.0
CVE-2024-11660
5.4MEDIUM
Summary
An identified vulnerability within Code-Projects Farmacia version 1.0 allows for cross site scripting (XSS) via manipulation of the 'name' parameter in the usuario.php file. This security flaw enables potential attackers to execute malicious scripts in the context of the user's browser, leading to unauthorized access and data exposure. Furthermore, the vulnerability may extend to other parameters within the application, thus broadening the attack surface. Due to the nature of XSS, exploitation can occur remotely, risking user safety and data integrity.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published