CVE-2024-9320: SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting
A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9320?
CVE-2024-9320 is classified as problematic, indicating a significant security risk.
How do I fix CVE-2024-9320?
To fix CVE-2024-9320, ensure you validate and sanitize user input in the /endpoint/add-timesheet.php file.
What software is affected by CVE-2024-9320?
CVE-2024-9320 affects SourceCodester Online Timesheet App version 1.0.
What type of vulnerability is CVE-2024-9320?
CVE-2024-9320 is a cross-site scripting (XSS) vulnerability.
Who can be impacted by CVE-2024-9320?
Users of the SourceCodester Online Timesheet App can be impacted by CVE-2024-9320 due to the security flaw.