CVE-2024-3443

Summary

CVE-2024-3443 is a newly disclosed vulnerability in the SourceCodester Prison Management System 1.0. This issue lies in the code of the /Employee/apply_leave.php file and involves the handling of user input in the txtstart_date and txtend_date arguments. A cross-site scripting (XSS) attack can be executed, allowing an adversary to inject malicious code into a victim's web browser, potentially leading to data theft or session hijacking. The vulnerability can be exploited remotely, meaning an attacker doesn't need to have prior access to the system. The exploit for this weakness has been made public, increasing the risk of widespread exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.