CVE-2024-33306

2024-05-0100:00:00

mitre

github.com

sourcecodester

xss

cross site scripting

create user

first name

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via “First Name” parameter in Create User.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sourcecodester:laboratory_management_system:-:*:*:*:*:*:*:*"
    ],
    "vendor": "sourcecodester",
    "product": "laboratory_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "-",
        "versionType": "custom",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]