CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

CVE-2024-24050

Sourcecodester Workout Journal App 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw exists in the "/add-user.php" endpoint, where the application fails to properly sanitize user-supplied input for the firstname and lastname parameters. An attacker can inject malici...

CVE-2024-24050: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...