CVE-2024-0722: code-projects Social Networking Site Message Page message.php cross site scripting
First published: Fri Jan 19 2024(Updated: )
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251546 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code-projects Social Networking Site | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0722?
CVE-2024-0722 has been classified as problematic due to its ability to facilitate cross-site scripting vulnerabilities.
How do I fix CVE-2024-0722?
To fix CVE-2024-0722, validate and sanitize user inputs in the message.php file to prevent script injections.
Which software is affected by CVE-2024-0722?
CVE-2024-0722 affects version 1.0 of the Code-Projects Social Networking Site.
What type of vulnerability is CVE-2024-0722?
CVE-2024-0722 is a cross-site scripting (XSS) vulnerability that affects the Message Page functionality.
What component of the system is related to CVE-2024-0722?
The vulnerability is related to the message.php file in the Code-Projects Social Networking Site.
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/code-projects
- canonical/code-projects social networking site
- version/code-projects social networking site/1.0