Code Projects · Code-Projects Farmacia · CVE-2024-11660
**Name of the Vulnerable Software and Affected Versions**
code-projects Farmacia version 1.0
**Description**
A vulnerability was found in the file usuario.php, where the manipulation of the `name` argument leads to cross-site scripting. It is possible to initiate the attack remotely. Other parameters might be affected as well.
**Recommendations**
For code-projects Farmacia version 1.0, consider disabling access to the vulnerable file usuario.php until a patch is available. As a temporary workaround, restrict the manipulation of the `name` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.