CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

CVE-2024-24050

A Stored Cross-Site Scripting (XSS) vulnerability exists in Sourcecodester Workout Journal App version 1.0 . The flaw resides in the /add-user.php endpoint, where the application fails to properly neutralize or sanitize the firstname and lastname parameters. An attacker can register a new account...