CVE-2024-33307: XSS

Published May 1, 2024

Updated

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.

Affected Software

2 affected components

Sourcecodester Laboratory Management System

Sourcecodester Laboratory Management System=1.0

Event History

May 1, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-33307?

CVE-2024-33307 is classified as a medium severity vulnerability due to its potential for exploitation through Cross Site Scripting.

How do I fix CVE-2024-33307?

To fix CVE-2024-33307, sanitize and validate the input from the 'Last Name' parameter in the Create User form to prevent XSS attacks.

What types of attacks can be performed with CVE-2024-33307?

Exploiting CVE-2024-33307 can lead to Cross Site Scripting (XSS) attacks, allowing an attacker to execute scripts in the context of the user's browser.

Which systems are affected by CVE-2024-33307?

CVE-2024-33307 affects SourceCodester Laboratory Management System version 1.0.

Is CVE-2024-33307 a common vulnerability?

Yes, Cross Site Scripting vulnerabilities like CVE-2024-33307 are common and often exploited in web applications if not properly mitigated.