CVE-2024-1970

Summary

CVE-2024-1970 is a newly disclosed vulnerability affecting the SourceCodester Online Learning System V2 1.0. This issue lies within an unidentified function present in the /index.php file. An attacker can exploit this cross-site scripting (XSS) flaw by manipulating the page argument, enabling them to inject malicious code. The attack can be executed remotely, increasing the risk. The vulnerability has been made public, potentially allowing malicious actors to take advantage of it. VDB-255126 is the assigned identifier for this security concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.