cbcvebase.
CVE-2024-24050
published 2024-03-20

CVE-2024-24050: Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname…

PriorityP427medium4.7CVSS 3.1
AVNACLPRNUIRSCCNILAN
EXPLOIT
EPSS
0.44%
35.4th percentile
Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php.

Affected

1 ranges
VendorProductVersion rangeFixed in
remyandradeworkout_journal_app——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.