CVE-2024-7948: SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7948?
CVE-2024-7948 is classified as problematic in severity.
What components are affected by CVE-2024-7948?
CVE-2024-7948 affects the Update Account Page feature of the SourceCodester Accounts Manager App version 1.0.
How do I fix CVE-2024-7948?
To fix CVE-2024-7948, update to the latest version of the SourceCodester Accounts Manager App that addresses this vulnerability.
What kind of attack does CVE-2024-7948 allow?
CVE-2024-7948 allows manipulation of the argument Account Name, Username, Password, or Link in the update-account.php file.
Who is the vendor for CVE-2024-7948?
The vendor for CVE-2024-7948 is Remy Andrade, the developer of the Accounts Manager App.