CVE-2024-1196

Summary

CVE-2024-1196 is a newly identified vulnerability affecting the SourceCodester Testimonial Page Manager 1.0. The issue lies in the file add-testimonial.php, specifically with its HTTP POST Request Handler component. By manipulating the argument name, description, or testimony, an attacker can successfully execute a cross-site scripting (XSS) attack. This vulnerability can be exploited remotely, making it a significant security concern. VDB-252694 is the assigned identifier for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.