Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Knoxpro

#43091of 53,624
6.1Total CVSS
Vulnerabilities · 1
PT-2024-39125
6.1
2024-09-09
Sourcecodester · Sourcecodester Online Food Ordering System · CVE-2024-8604
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A problematic issue has been found in the system, affecting the Create an Account Page, specifically the file index.php. The manipulation of the `First Name` and `Last Name` arguments leads to cross-site scripting. This issue can be initiated remotely. Recommendations: For version 2.0, consider restricting the input for `First Name` and `Last Name` fields to minimize the risk of cross-site scripting until a patch is available. As a temporary workaround, validate and sanitize user input for these fields to prevent malicious code injection.