CVE-2024-1010: SourceCodester Employee Management System edit-profile.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252279.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1010?
CVE-2024-1010 is classified as a problematic vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2024-1010?
To fix CVE-2024-1010, ensure proper input validation and sanitization for the arguments fullname, phone, date of birth, address, and date of appointment in the edit-profile.php file.
What types of attacks does CVE-2024-1010 enable?
CVE-2024-1010 enables cross-site scripting (XSS) attacks, which can allow an attacker to inject malicious scripts into web pages viewed by users.
Which software versions are affected by CVE-2024-1010?
CVE-2024-1010 affects version 1.0 of the SourceCodester Employee Management System.
What components of the Employee Management System are impacted by CVE-2024-1010?
CVE-2024-1010 impacts the edit-profile.php file and specifically the handling of several user-input parameters.