CVE-2024-1970

Summary

CVE-2024-1970 is a newly disclosed vulnerability affecting the SourceCodester Online Learning System V2 1.0. This issue lies in an unidentified function of the /index.php file, which can be exploited through manipulation of the page argument. The exploitation of this vulnerability results in cross-site scripting, allowing attackers to inject malicious code into unsuspecting users' web browsers. Remotely executing such attacks is possible, making this a significant security concern. The vulnerability, identified as VDB-255126, has been made public, increasing the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.