Cross-Site Scripting Vulnerability in Simple Admin Panel App
CVE-2024-25224

5.4MEDIUM

Key Information:

Vendor

Code-projects

Status
Simple Admin Panel
Vendor
CVE Published:
14 February 2024

What is CVE-2024-25224?

The Simple Admin Panel App v1.0 is susceptible to cross-site scripting (XSS) attacks, allowing attackers to inject and execute arbitrary web scripts or HTML. This vulnerability is exploited through a crafted payload injected into the Size Number parameter during the Add Size function, potentially compromising the application's security and end-user data.

References

https://github.com/BurakSevben/CVEs/blob/main/Simple%20Ad...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.