CVE-2024-40474

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Aug 12, 2024
Updated: Aug 15, 2024
CWE ID 79

Summary

CVE-2024-40474 is a Reflected Cross Site Scripting (XSS) vulnerability that affects the "edit-cate.php" file in the SourceCodester House Rental Management System version 1.0. Maliciously crafted input can be reflected off the vulnerable page and executed in the context of the user, leading to potential data theft or unauthorized actions. Attackers can inject malicious scripts, stealing sensitive information or gaining unauthorized access to user accounts. Users are advised to update to the latest version of the software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share