CVE-2024-35583 - A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field

Published May 28, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.

Affected products

Vendor SourceCodester Product Laboratory Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Laboratory Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-35381
Advisory
https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md
ExploitTechnical Description
https://owasp.org/www-community/attacks/xss/
Not Applicable
https://portswigger.net/web-security/cross-site-scripting/stored
Not Applicable

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-35381		Advisory
https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md		ExploitTechnical Description
https://owasp.org/www-community/attacks/xss/		Not Applicable
https://portswigger.net/web-security/cross-site-scripting/stored		Not Applicable