CVE-2024-40074: XSS
Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40074?
CVE-2024-40074 is considered a high-severity vulnerability due to its potential for Stored Cross Site Scripting (XSS) exploitation.
How do I fix CVE-2024-40074?
To fix CVE-2024-40074, apply input validation and output encoding to the 'short_name' POST parameter in the affected system.
What software versions are affected by CVE-2024-40074?
CVE-2024-40074 affects Sourcecodester Online ID Generator System version 1.0.
What type of vulnerability is CVE-2024-40074?
CVE-2024-40074 is a Stored Cross Site Scripting (XSS) vulnerability.
Where is the point of vulnerability located for CVE-2024-40074?
The point of vulnerability for CVE-2024-40074 is in the 'short_name' POST parameter within the update settings functionality.