Vulnerability Details CVE-2024-1010
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252279.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.0%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 4.0
References
- https://github.com/jomskiller/Employee-Management-System---Stored-XSS
- https://github.com/jomskiller/Employee-Management-System---Stored-XSS/
- https://vuldb.com/?ctiid.252279
- https://vuldb.com/?id.252279
- https://github.com/jomskiller/Employee-Management-System---Stored-XSS
- https://github.com/jomskiller/Employee-Management-System---Stored-XSS/
- https://vuldb.com/?ctiid.252279
- https://vuldb.com/?id.252279
Products affected by CVE-2024-1010
-
cpe:2.3:a:employee_management_system_project:employee_management_system:1.0