Cross Site Scripting Vulnerability in Code-projects Budget Management
CVE-2024-34954
6.1MEDIUM
What is CVE-2024-34954?
The Budget Management application by Code-projects version 1.0 is susceptible to a Cross Site Scripting (XSS) vulnerability via the 'budget' parameter. This flaw enables attackers to inject malicious scripts into web pages viewed by users, compromising sensitive information and facilitating unauthorized actions. Proper input validation and sanitization mechanisms should be implemented to mitigate such vulnerabilities effectively.