Cross-Site Scripting Vulnerability in code-projects Simple Admin Panel

CVE-2024-12933

What is CVE-2024-12933?

A cross-site scripting vulnerability exists in the updateItemController.php file of code-projects' Simple Admin Panel version 1.0. This vulnerability arises when the parameters 'p_name' or 'p_desc' are manipulated, potentially allowing attackers to inject malicious scripts that can be executed in the context of an unsuspecting user's browser. As a result, the exploitation of this flaw can lead to unauthorized actions or the theft of sensitive user information. Attackers can exploit this vulnerability remotely, which increases its potential impact on users and organizations relying on this web application.

References