Vulnerability Description
A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument email_address/address/company_name/job_title/jobDescriptionparameter leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rems | Profile Registration Without Reload\/Refresh | 1.0 |
Related Weaknesses (CWE)
References
- https://gist.github.com/sechurity/07c5a3a15f21313ee657d05baadbee19ExploitThird Party Advisory
- https://vuldb.com/?ctiid.279949Permissions RequiredThird Party AdvisoryVDB Entry
- https://vuldb.com/?id.279949Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.417589Third Party AdvisoryVDB Entry
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2024-9799?
CVE-2024-9799 is a vulnerability with a CVSS score of 3.5 (LOW). A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file a...
How severe is CVE-2024-9799?
CVE-2024-9799 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-9799?
Check the references section above for vendor advisories and patch information. Affected products include: Rems Profile Registration Without Reload\/Refresh.