CVE-2024-8366: code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument fname/lname/email with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8366?
CVE-2024-8366 has been classified as problematic.
How do I fix CVE-2024-8366?
To fix CVE-2024-8366, update the Pharmacy Management System to the latest version or apply the recommended patches.
What components are affected by CVE-2024-8366?
CVE-2024-8366 affects the Update My Profile Page located in the /index.php?id=userProfileEdit file.
What data could be compromised by CVE-2024-8366?
The vulnerability allows manipulation of the arguments fname, lname, and email in the user profile edit process.
Is CVE-2024-8366 specific to a software version?
Yes, CVE-2024-8366 specifically affects version 1.0 of the code-projects Pharmacy Management System.