CVE-2024-1871: SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254694 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1871?
CVE-2024-1871 is classified as problematic, indicating a significant vulnerability that requires attention.
How do I fix CVE-2024-1871?
To fix CVE-2024-1871, sanitize and validate the 'pname' parameter in the affected file to prevent cross-site scripting.
Which version of the SourceCodester Employee Management System is affected by CVE-2024-1871?
CVE-2024-1871 affects version 1.0 of the SourceCodester Employee Management System.
What kind of vulnerability is CVE-2024-1871?
CVE-2024-1871 is a cross-site scripting (XSS) vulnerability affecting the Project Assignment Report component.
In which file can CVE-2024-1871 be found?
CVE-2024-1871 can be found in the file /process/assignp.php.