CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cna@vuldb.com

Published

2024-08-20

Last modified

2024-08-20

Weaknesses

CWE-79

Affected products

• Accounts Manager App (Remyandrade)
• Accounts Manager App (Sourcecodester)

References

• https://github.com/jadu101/CVE/blob/main/SourceCodester_Accounts_Manager_App_update_account_xss.md
• https://vuldb.com/?ctiid.275140
• https://vuldb.com/?id.275140
• https://vuldb.com/?submit.393921