Cross Site Scripting Vulnerability in PHP CRUD 1.0 Could Lead to Remote Exploitation

CVE-2024-8563

What is CVE-2024-8563?

A vulnerability exists in the SourceCodester PHP CRUD version 1.0, specifically in the /endpoint/update.php file. An attacker can exploit this issue by manipulating the parameters first_name, middle_name, or last_name, resulting in cross-site scripting (XSS). This flaw permits the remote execution of malicious scripts in the context of a user’s session, potentially compromising sensitive information and web application integrity. The details of this exploit have been disclosed publicly, increasing the risk of an attack in the wild.

References