PT-2024-33632 · Sourcecodester · Sourcecodester Interactive Map With Marker

Burak · Published 2024-05-16 · Updated 2025-02-10 · CVE-2024-4968

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Interactive Map with Marker version 1.0

Description A problem was found in the file Marker Name of the component Add Marker, which can lead to cross site scripting. The issue can be exploited remotely.

Recommendations For version 1.0, consider disabling the Add Marker component until a fix is available to prevent cross site scripting attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-4968

Affected Products

Sourcecodester Interactive Map With Marker

References · 7

• 🔥 https://github.com/BurakSevben/CVEs/blob/main/Interactive%20Map%20App/Interactive%20Map%20App%20-%20Cross-Site-Scripting.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4968 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4968 · Vendor Advisory
• https://vuldb.com/?id.264536 · Note
• https://vuldb.com/?submit.335191 · Note
• https://vuldb.com/?ctiid.264536 · Note
• https://t.me/cvenotify/110539 · Telegram Post