Cross Site Scripting in SourceCodester Complaints Report Management System
CVE-2024-7200

5.4MEDIUM

Key Information:

Vendor

Oretnom23

Status
Complaints Report Management System
Vendor
CVE Published:
29 July 2024

What is CVE-2024-7200?

A cross site scripting vulnerability has been identified in SourceCodester's Complaints Report Management System version 1.0. The issue arises from improper handling of user input in the /admin/ajax.php?action=save_settings file, allowing attackers to manipulate the argument name. This vulnerability may enable remote attackers to execute arbitrary scripts in the context of a user’s session, posing a significant risk to user data and application integrity. The exploit has been made publicly known, underscoring the urgent need for affected users to implement the necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.272621
https://vuldb.com/?ctiid.272621
https://vuldb.com/?submit.380422

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.