3 matches found
CVE-2024-33304
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...
6.1CVSS5.8AI score0.00426EPSS
SaveExploits1References1
CVE-2024-33304
SourceCodester Product Show Room 1.0 (and earlier versions) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically via the "Last Name" parameter within the Add Users function. This allows for potential ma...
6.1CVSS6AI score0.00426EPSS
SaveExploits1References1Affected Software1
20