CVE-2024-8604: SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting

Published Sep 9, 2024

Updated

A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.

Affected Software

1 affected component

oretnom23 Online Food Ordering System=2.0

Event History

Sep 9, 2024

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-8604?

CVE-2024-8604 is classified as a problematic vulnerability due to its potential for Cross Site Scripting (XSS).

How do I fix CVE-2024-8604?

To fix CVE-2024-8604, validate and sanitize user input on the Create an Account page to prevent XSS attacks.

What component is affected by CVE-2024-8604?

CVE-2024-8604 affects the index.php file in the Create an Account Page component of SourceCodester Online Food Ordering System 2.0.

What type of vulnerability is CVE-2024-8604?

CVE-2024-8604 is a Cross Site Scripting (XSS) vulnerability that can be exploited through manipulated input fields.

Which version of software is impacted by CVE-2024-8604?

CVE-2024-8604 impacts version 2.0 of the SourceCodester Online Food Ordering System.