CVE-2024-7749

Summary

CVE-2024-7749 is a newly disclosed vulnerability affecting the SourceCodester Accounts Manager App 1.0. This issue lies within an unidentified function of the /endpoint/add-account.php file. Manipulation of the account_name argument results in cross-site scripting (XSS), allowing attackers to inject malicious code into web pages viewed by other users. The exploit is publicly known, increasing the risk of remote attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.