CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User

High · published May 1, 2024

CVSS v3.1
7.4
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00657 · 50.8th percentile
Published
2024-05-01T00:00Z
EPSS history
Timeline
  • 01 MAY 00:00Z
    SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User
    cvelistv5