CVE-2024-12933: code-projects Simple Admin Panel updateItemController.php cross site scripting
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12933?
CVE-2024-12933 has been rated as problematic.
What does CVE-2024-12933 affect?
CVE-2024-12933 affects the Simple Admin Panel version 1.0, specifically the file updateItemController.php.
What type of vulnerability is CVE-2024-12933?
CVE-2024-12933 is a cross-site scripting (XSS) vulnerability.
How can I mitigate CVE-2024-12933?
To mitigate CVE-2024-12933, ensure proper sanitization and validation of user input for the parameters p_name and p_desc.
Is CVE-2024-12933 exploitable?
Yes, the manipulation of certain arguments in CVE-2024-12933 can lead to successful exploitation via cross-site scripting.