A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html | product |
https://github.com/vighneshnair7/CVE-2024-51031 | third party advisory |