CVE-2024-9320
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2024-9320 is a cross-site scripting vulnerability identified in the SourceCodester Online Timesheet App version 1.0, specifically affecting the file /endpoint/add-timesheet.php. The vulnerability arises from improper handling of user input in the Add Timesheet Form, allowing attackers to manipulate arguments such as "day/task" and execute malicious scripts remotely. This poses a potential risk to organizations using this application, as it could lead to unauthorized access or data manipulation with a medium severity rating (CVSS score of 5.4). To mitigate this vulnerability, it is recommended that users update their software or implement input validation measures to ensure proper sanitization of user inputs. Public disclosure of the vulnerability increases its exploitability, making timely remediation critical for affected users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions