CVE Details
Basic Information
| Title | SourceCodester Event Registration System cross site scripting |
|---|---|
| Type | cve |
| Published | 2024-05-20T06:31:04.701Z |
| Modified | 2024-08-01T21:03:10.676Z |
Product Information
| Vendor | SourceCodester |
|---|---|
| Product | Event Registration System |
| Version | 1.0 |
CVSS Information
| Base Score | 5.3 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
AI Analysis
| AI Description | A cross-site scripting (XSS) vulnerability in SourceCodester Event Registration System 1.0 allows remote attackers to inject malicious scripts via the ‘e’ argument in the registration page. This could lead to session hijacking or unauthorized actions. |
|---|---|
| AI Severity | Medium |
| AI Vendor | SourceCodester |
| AI Product | Event Registration System |
| AI Version | 1.0 |
Affected Products
- SourceCodester Event Registration System 1.0
Additional Information
| CWE List | CWE-79 |
|---|---|
| Source | VulDB |
Description
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /registrar/?page=registration. The manipulation of the argument e leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265201 was assigned to this vulnerability.