CVE-2024-9799

Summary

CVE-2024-9799 is a newly identified vulnerability affecting the SourceCodester Profile Registration without Reload Refresh 1.0 software. This issue lies within an unknown functionality of the file add.php and is classified as a cross-site scripting (XSS) vulnerability. Malicious actors can manipulate the email_address/address/company_name/job_title/jobDescription parameters to inject malicious code into a victim's web browser. The attack can be launched remotely, and the exploit has been made public, increasing the risk of widespread exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.