CVE-2024-33303

The SourceCodester Product Show Room 1.0 (and prior versions) is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input during web page generation, specifically via the "First Name" parameter located under the Add Users feature. This flaw allows ...