CVE-2024-7644: SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting
A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7644?
CVE-2024-7644 has been classified as a problematic vulnerability.
What components are affected by CVE-2024-7644?
CVE-2024-7644 affects the Add Leads Handler located in /endpoint/add-leads.php of the SourceCodester Leads Manager Tool version 1.0.
What type of vulnerability is CVE-2024-7644?
CVE-2024-7644 is a cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-7644?
To fix CVE-2024-7644, sanitize and validate inputs for the leads_name and phone_number parameters in the affected component.
Is there a patch available for CVE-2024-7644?
As of now, there is no specific patch mentioned for CVE-2024-7644, so applying the recommended input validation is essential.