CVE-2024-51032: XSS

Published Nov 8, 2024

Updated

A Cross-site Scripting (XSS) vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field.

Affected Software

1 affected component

oretnom23 Toll Tax Management System=1.0

Event History

Nov 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-51032?

The severity of CVE-2024-51032 is considered medium due to the potential for data exposure through unauthorized script execution.

How do I fix CVE-2024-51032?

To fix CVE-2024-51032, validate and sanitize the "owner" input field to prevent arbitrary web script injection.

Who is affected by CVE-2024-51032?

Users of Sourcecodester Toll Tax Management System version 1.0 are affected by CVE-2024-51032.

What kind of attack is possible with CVE-2024-51032?

CVE-2024-51032 allows for Cross-site Scripting (XSS) attacks, enabling attackers to inject malicious scripts into web pages.

What does CVE-2024-51032 allow an attacker to do?

CVE-2024-51032 allows an attacker to inject arbitrary web scripts when authenticated users interact with the "owner" input field.