CVE-2024-7929 MEDIUM

CVE-2024-7929: SourceCodester Simple Forum Website Signup Page registration.php cross site scripting

Vendor Sourcecodester

Product Simple Forum Website

Weakness CWE-79 · XSS

Published August 19, 2024

Last update August 20, 2024

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 19, 2024 CVE published

August 20, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-7929 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-8154 SourceCodester QR Code Bookmark System Parameter update-bookmark.php cross site scripting CVE-2021-29434 Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields CVE-2024-49320 WordPress Encyclopedia / Glossary / Wiki plugin <= 1.7.60 - Cross Site Scripting (XSS) vulnerability CVE-2024-11678 CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting CVE-2020-36853 10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change