CVE-2023-27242: XSS
Published Mar 24, 2023
·Updated
SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module.
Affected Software
2 affected components
Loan Management System Project Loan Management System=1.0
Razormist Loan Management System=1.0
Event History
Mar 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27242?
CVE-2023-27242 is a cross-site scripting (XSS) vulnerability in SourceCodester Loan Management System v1.0.
2
What is the severity of CVE-2023-27242?
The severity of CVE-2023-27242 is medium with a CVSS score of 5.4.
3
How does CVE-2023-27242 affect SourceCodester Loan Management System?
CVE-2023-27242 allows an attacker to execute arbitrary scripts in the context of a user's browser, posing a risk of data theft or unauthorized actions.
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-27242?
The CWE for CVE-2023-27242 is CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
5
How can I fix CVE-2023-27242 in SourceCodester Loan Management System?
To fix CVE-2023-27242, developers should properly sanitize and validate user input to prevent the injection of malicious scripts.