CVE-2024-33303

CVE-2024-33303 affects SourceCodester Product Show Room 1.0 with a Cross Site Scripting (XSS) vulnerability exploitable via the First Name field under Add Users. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N with base score 8.2 (HIGH); impact is confidentiality high, integrit...

CVE-2024-33304

CVE-2024-33304 affects SourceCodester Product Show Room 1.0. A Cross Site Scripting (XSS) vulnerability exists via the "Last Name" field under Add Users, enabling script injection. The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/CVE list/PT-Security/Vulnrichment). The pr...

CVE-2024-33302

CVE-2024-33302 affects SourceCodester Product Show Room 1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the Middle Name field under Add Users, enabling script injection. Per the CVSS data, the attack vector is local with low privileges, no user interaction required, and...