Cross Site Scripting Vulnerability in SourceCodester Yoga Class Registration System

CVE-2024-7914

Summary

A vulnerability has been discovered in the SourceCodester Yoga Class Registration System version 1.0, resulting from an inadequate handling of parameters within the SystemSettings.php file. Specifically, the manipulation of user input can be exploited to inject malicious scripts into web pages viewed by other users. This cross-site scripting issue allows attackers to launch attacks remotely, gaining unauthorized access to sensitive information or performing actions on behalf of users. The public disclosure of this vulnerability increases the risk of exploitation, making it crucial for users to apply safeguards promptly.

References