CVE-2024-3140

Summary

CVE-2024-3140 is a newly disclosed vulnerability affecting the SourceCodester Computer Laboratory Management System 1.0. The issue lies within the /classes/Users.php?f=save file and arises from the manipulation of the middlename argument. This vulnerability results in cross-site scripting, permitting remote attackers to initiate the exploit. The details of this vulnerability, identified as VDB-258915, have been made public, increasing the risk of potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.