CVE-2024-3377

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

0.1%

top 75.43%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Computer Laboratory Management System Oretnom23 Computer Laboratory Management System

Timeline

PublishedApr 6

Description

A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259498 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/computer_laboratory_management_system1.0

▶NVDoretnom23/computer_laboratory_management_system1.0

🔴Vulnerability Details

CVEList

SourceCodester Computer Laboratory Management System cross site scripting↗2024-04-06

▶

GHSA

GHSA-w6hq-2wh4-49vf: A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1↗2024-04-06

▶