CVE-2024-33303

The SourceCodester Product Show Room 1.0 (and prior versions) is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input during web page generation, specifically via the "First Name" parameter located under the Add Users feature. This flaw allows ...

CVE-2024-33304

SourceCodester Product Show Room 1.0 (and earlier versions) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically via the "Last Name" parameter within the Add Users function. This allows for potential ma...

CVE-2024-33302

SourceCodester Product Show Room version 1.0 and before is vulnerable to Cross-Site Scripting (XSS) . The vulnerability is triggered via the Middle Name parameter within the Add Users section, where improper neutralization of input during web page generation allows for potential malicious script ...