VULNERABILITY INTELLIGENCE

CVE-2024-1028

CVSS score3.5 LOW

EPSS probability0.36%

CISA KEVNot currently listed

Published2024-01-30

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Post Handler. The manipulation of the argument Description with the input <marquee>HACKED</marquee> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252301 was assigned to this vulnerability.

Weakness classification

cna@vuldb.com: CWE-79

Primary references

cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory