Cross Site Scripting Vulnerability in SourceCodester School Log Management System
CVE-2024-7218

5.1MEDIUM

Key Information:

Vendor: Sourcecodester
Status: School Log Management System
Vendor: CVE Published:; 30 July 2024

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-7218?

A cross site scripting vulnerability has been discovered in the SourceCodester School Log Management System 1.0, specifically related to the handling of parameters in the /admin/ajax.php?action=save_student file. This flaw allows an attacker to manipulate the 'name' argument, enabling the execution of malicious scripts in the context of the user's browser. The vulnerability can be exploited remotely, thereby posing significant risks to the integrity of user sessions and potentially leading to unauthorized access to sensitive information.

Affected Version(s)

School Log Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-7218 - Proof of Concept