CVE-2024-57522

MEDIUM

6.4

Description

SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation.

Details CVE

Score CVSS v3.16.4

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurREQUIRED

Publie2/3/2025

Derniere modification4/22/2025

Sourcenvd

Observations honeypot0

Produits affectes

oretnom23:packers_and_movers_management_system

Faiblesses (CWE)

CWE-79

References

https://github.com/HackWidMaddy/CVE-2024-57522(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.