CVE-2024-8136 MEDIUM

CVE-2024-8136: SourceCodester Record Management System sort1_user.php cross site scripting

Vendor Sourcecodester
Product Record Management System
Weakness CWE-79 · XSS
Published August 24, 2024
Last update August 26, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort1_user.php. The manipulation of the argument position leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 24, 2024 CVE published
August 26, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS CVE-2024-2967 Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-44393 Piwigo Reflected XSS vulnerability CVE-2023-47810 WordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) CVE-2026-30919 facileManager Affected by Stored Cross-Site Scripting (XSS)