CVE-2024-3140
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 1, 2024
Updated: May 17, 2024
CWE ID 863
Summary
CVE-2024-3140 is a newly disclosed vulnerability affecting the SourceCodester Computer Laboratory Management System 1.0. The issue lies within the /classes/Users.php?f=save file and arises from the manipulation of the middlename argument. This vulnerability results in cross-site scripting, permitting remote attackers to initiate the exploit. The details of this vulnerability, identified as VDB-258915, have been made public, increasing the risk of potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Cybozu Garoon
Affected Vendors
- Cybozu