Sourcecodester · Sourcecodester Simple Online Bidding System · CVE-2024-5437
Name of the Vulnerable Software and Affected Versions:
SourceCodester Simple Online Bidding System version 1.0
Description:
A problematic issue was found in the function `save category` of the file /admin/index.php?page=categories, where the manipulation of the argument `name` leads to cross-site scripting. This issue can be exploited remotely.
Recommendations:
For SourceCodester Simple Online Bidding System version 1.0, consider disabling the `save category` function in the /admin/index.php?page=categories file until a patch is available to prevent cross-site scripting attacks. Restrict access to the /admin/index.php?page=categories endpoint to minimize the risk of exploitation. Avoid using the `name` argument in the affected function until the issue is resolved.