Cross Site Scripting Vulnerability in itsourcecode Placement Management System
CVE-2024-50656
6.1MEDIUM
Summary
The itsourcecode Placement Management System 1.0 contains a vulnerability that allows attackers to execute arbitrary JavaScript code in the context of the user's browser through the Full Name field in registration.php. This may lead to various attacks, including data theft and session hijacking, putting user information and application integrity at risk.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved