2 matches found
CVE-2020-24194
CVE-2020-24194 is an XSS vulnerability in SourceCodester Daily Tracker System v1.0, exploitable via the fullname parameter in user-profile.php to inject arbitrary web script/HTML. The provided connected documents confirm the issue but do not specify affected versions beyond v1.0, nor provide a re...
6.1CVSS6AI score0.00829EPSS
SaveExploits1References1Affected Software1
CVE-2020-24194: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter...
6.1CVSS5.9AI score0.00829EPSS
SaveExploits1References4
20