Stored Cross-Site Scripting Vulnerability in Sourcecodester Online ID Generator System
CVE-2024-40074

Currently unrated

Key Information:

Vendor
Sourcecodester
Status
Online ID Generator System
Vendor
CVE Published:
16 April 2025

Summary

The Sourcecodester Online ID Generator System version 1.0 has a vulnerability that allows for Stored Cross-Site Scripting (XSS). This security issue is found in the POST parameter 'short_name' of the update settings functionality located in id_generator/classes/SystemSettings.php. Attackers can exploit this vulnerability to inject malicious scripts, compromising user data and application integrity.

References

https://github.com/DiliLearngent/BugReport/blob/main/php/...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.