CVE-2024-12001: code-projects Wazifa System Setting updatesettings.php cross site scripting
A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12001?
CVE-2024-12001 is classified as problematic and poses a cross-site scripting vulnerability.
How do I fix CVE-2024-12001?
To fix CVE-2024-12001, it is recommended to sanitize and validate user inputs in the affected function of the Setting Handler.
What software is affected by CVE-2024-12001?
CVE-2024-12001 affects Wazifa System version 1.0.
Does CVE-2024-12001 allow remote code execution?
CVE-2024-12001 does not directly allow remote code execution but facilitates cross-site scripting which could lead to further exploits.
What components of Wazifa System are impacted by CVE-2024-12001?
The vulnerability in CVE-2024-12001 specifically impacts the Setting Handler component, particularly the updatesettings.php file.