CVE-2024-24494

2024-02-0800:00:00

mitre

www.cve.org

cross site scripting

daily habit tracker

remote attacker

arbitrary code

add-tracker.php

update-tracker.php

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, read_book, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components.