CVE-2024-10433: Project Worlds Simple Web-Based Chat Application index.php cross site scripting
A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Name/Comment leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions different parameters to be affected which do not correlate with the screenshots of a successful attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10433?
CVE-2024-10433 is classified as problematic due to its potential for cross-site scripting vulnerabilities.
How does CVE-2024-10433 affect the application?
CVE-2024-10433 affects the handling of user input in the /index.php file, specifically through the Name/Comment arguments.
What type of vulnerability is CVE-2024-10433?
CVE-2024-10433 is a cross-site scripting (XSS) vulnerability.
How can I fix CVE-2024-10433?
To fix CVE-2024-10433, ensure proper input sanitization and validation on the Name/Comment fields in the application.
Which version of the software is affected by CVE-2024-10433?
CVE-2024-10433 affects version 1.0 of the Project Worlds Simple Web-Based Chat Application.