Sourcecodester · Sourcecodester Online Food Ordering System · CVE-2024-8604
Name of the Vulnerable Software and Affected Versions:
SourceCodester Online Food Ordering System version 2.0
Description:
A problematic issue has been found in the system, affecting the Create an Account Page, specifically the file index.php. The manipulation of the `First Name` and `Last Name` arguments leads to cross-site scripting. This issue can be initiated remotely.
Recommendations:
For version 2.0, consider restricting the input for `First Name` and `Last Name` fields to minimize the risk of cross-site scripting until a patch is available. As a temporary workaround, validate and sanitize user input for these fields to prevent malicious code injection.