CVE-2024-40473: XSS

Published Aug 8, 2024

Updated

A Stored Cross Site Scripting (XSS) vulnerability was found in "managehouses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "Houseno" and "Description" parameter fields.

Affected Software

1 affected component

Mayurik Best House Rental Management System=1.0

Event History

Aug 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Aug 12, 2024

Data Sourced

via NVD·01:38 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-40473?

CVE-2024-40473 has a medium severity level due to the potential for remote code execution via cross site scripting.

How do I fix CVE-2024-40473?

To mitigate CVE-2024-40473, validate and sanitize input fields for "House_no" and "Description" to prevent script injection.

What is the impact of CVE-2024-40473?

The impact of CVE-2024-40473 allows attackers to execute arbitrary scripts in the context of the user's session.

What systems are affected by CVE-2024-40473?

CVE-2024-40473 affects SourceCodester Best House Rental Management System version 1.0.

Is CVE-2024-40473 an easy vulnerability to exploit?

Yes, CVE-2024-40473 can be easily exploited by sending crafted requests to the vulnerable parameters.