CVE-2024-8141

Summary

CVE-2024-8141 is a cross-site scripting vulnerability identified in the SourceCodester Daily Calories Monitoring Tool version 1.0, specifically affecting the /endpoint/add-calorie.php file. This flaw allows an attacker to manipulate the parameters calorie_date and calorie_name, potentially leading to remote exploitation. Affected products include xxxV8w and xnkKKu. To mitigate this risk, organizations should sanitize user inputs and apply security updates as they become available. The vulnerability poses a medium severity risk with a CVSS score of 5.4, requiring low privileges and user interaction for exploitation while impacting integrity and confidentiality minimally.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.