CVE-2024-48415

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page...

PT-2024-33101 · Itsourcecode · Itsourcecode Alton Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Loan Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contact no, email, and tax id parameters in the new borrowers...

CVE-2024-48415

The connected documents confirm CVE-2024-48415 affects itsourcecode Loan Management System v1.0, with a Cross Site Scripting (XSS) vulnerability exploitable via a crafted payload passed to the lastname, firstname, middlename, address, contact_no, email, and tax_id fields in the New Borrowers page...

CVE-2024-48415: Improper Neutralization of Input During Web Page Generation

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page...

CVE-2024-48415

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page...