CVE-2024-8605

A vulnerability classified as problematic was found in code-projects Inventory Management 1.0. This vulnerability affects unknown code of the file /view/registration.php of the component Registration Form. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - cna@vuldb.com

Published

2024-09-09

Last modified

2024-09-09

Weaknesses

CWE-79

Affected products

• Inventory Management (Code-projects)

References

• https://code-projects.org/
• https://github.com/ali0999109/Inventory-management
• https://vuldb.com/?ctiid.276832
• https://vuldb.com/?id.276832
• https://vuldb.com/?submit.404711