CVE-2024-1871

Summary

CVE-2024-1871 is a newly disclosed vulnerability affecting the SourceCodester Employee Management System 1.0. This issue lies within the /process/assignp.php component's Project Assignment Report, specifically an unidentified function. Manipulation of the pname argument triggers a cross-site scripting (XSS) vulnerability, exposing users to remote attacks. The exploit for this vulnerability has been made public, posing an immediate threat. VDB-254694 is the assigned identifier for this problematic finding.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.