Cross Site Scripting Vulnerability in Update Account Page

CVE-2024-7948

Summary

A cross-site scripting vulnerability was identified in the SourceCodester Accounts Manager App version 1.0, specifically within the update-account.php file associated with the Update Account Page component. This vulnerability occurs due to improper handling of user input fields such as Account Name, Username, Password, and Link. Attackers can exploit this weakness remotely, enabling them to inject malicious scripts into web pages viewed by other users. Such exploitation may lead to unauthorized data access, session hijacking, or other malicious activities. The vulnerability has been publicly disclosed, raising concerns for organizations using this application.

References