CVE-2024-13069
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Dec 31, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-13069 is a newly disclosed vulnerability affecting the SourceCodester Multi Role Login System version 1.0. This issue, classified as problematic, affects an unidentified function in the file /endpoint/add-user.php. By manipulating the argument name, an attacker can execute cross-site scripting (XSS) attacks, which can be launched remotely. The exploit for this vulnerability has been made public, potentially increasing the risk for successful attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.