CVE-2024-57522: XSS
SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57522?
CVE-2024-57522 has a high severity due to the potential for Cross Site Scripting (XSS) attacks.
How do I fix CVE-2024-57522?
To fix CVE-2024-57522, validate and sanitize user inputs in the username and name fields to prevent script injection.
What types of attacks can CVE-2024-57522 enable?
CVE-2024-57522 can enable an attacker to execute arbitrary scripts in the users' browsers, potentially stealing cookies or session tokens.
Which versions of the SourceCodester Packers and Movers Management System are affected by CVE-2024-57522?
CVE-2024-57522 affects version 1.0 of SourceCodester Packers and Movers Management System.
Who is affected by CVE-2024-57522?
Users of the SourceCodester Packers and Movers Management System who allow unvalidated input in user creation are at risk of CVE-2024-57522.