CVE-2024-7942

Summary

CVE-2024-7942 is a newly disclosed vulnerability affecting the SourceCodester Leads Manager Tool 1.0. This issue resides in the update-leads.php file and is classified as a cross-site scripting (XSS) vulnerability. The manipulation of the argument phone_number can be exploited to inject malicious scripts, enabling attackers to execute arbitrary code in the context of affected users. The exploit can be initiated remotely, posing a significant threat to users of this tool. Public disclosure of the exploit increases the risk of widespread attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.