CVE-2024-1215: SourceCodester CRUD without Page Reload fetch_data.php cross site scripting
A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252782 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1215?
CVE-2024-1215 has been rated as problematic.
How can I fix CVE-2024-1215?
To fix CVE-2024-1215, sanitize user input in the fetch_data.php file to prevent cross site scripting.
What systems are affected by CVE-2024-1215?
CVE-2024-1215 affects version 1.0 of the SourceCodester CRUD without Page Reload application.
What type of vulnerability is CVE-2024-1215?
CVE-2024-1215 is a cross site scripting (XSS) vulnerability.
What functionality of the application is impacted by CVE-2024-1215?
CVE-2024-1215 impacts the fetch_data.php file functionality related to the username and city arguments.