Cross Site Scripting Vulnerability in SourceCodester School Log Management System
CVE-2024-7218

6.1MEDIUM

Key Information:

Vendor

Oretnom23

Status
School Log Management System
Vendor
CVE Published:
30 July 2024

What is CVE-2024-7218?

A cross site scripting vulnerability has been discovered in the SourceCodester School Log Management System 1.0, specifically related to the handling of parameters in the /admin/ajax.php?action=save_student file. This flaw allows an attacker to manipulate the 'name' argument, enabling the execution of malicious scripts in the context of the user's browser. The vulnerability can be exploited remotely, thereby posing significant risks to the integrity of user sessions and potentially leading to unauthorized access to sensitive information.

References

https://vuldb.com/?id.272789
https://vuldb.com/?ctiid.272789
https://vuldb.com/?submit.380425

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.