VULNERABILITY INTELLIGENCE
CVE-2024-8137
CVSS score3.5 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Description
A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_user.php. The manipulation of the argument search leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Weakness classification
- cna@vuldb.com: CWE-79
- nvd@nist.gov: CWE-79
Primary references
- cna@vuldb.com — Exploit
- cna@vuldb.com — Permissions Required
- cna@vuldb.com — Permissions Required
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Product