Cross Site Scripting Vulnerability in House Rental Management System

CVE-2024-9033

Summary

The SourceCodester Best House Rental Management System version 1.0 is affected by a cross-site scripting (XSS) vulnerability that exists in the file /ajax.php, specifically in the functionality triggered by 'action=save_category'. This flaw allows an attacker to manipulate the argument 'name', which can lead to the execution of malicious scripts in the context of the victim's browser. The exploit can be conducted remotely, meaning that attackers do not need physical access to the affected system to initiate the attack. With the vulnerability now publicly disclosed, the potential for exploitation increases, making timely patching essential for users of this management system.

References