CVE-2024-1010

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252279.

Score
CVSS 3.1 5.4 Medium
Status
Modified - cna@vuldb.com
Published
2024-01-29
Last modified
2025-05-29
Weaknesses
CWE-79

Affected products

References