CVE-2024-51031

A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields.

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.44% chance of exploitation in the next 30 days, 37th percentile

Published

2024-11-08

Updated

2024-11-20

Proof-of-concept exploits (1)

• vighneshnair7/CVE-2024-510310★ · 2024-11-05

Security advisories

• https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.ht…

References

• CVE Record
• NVD entry

Related

• CVE-2024-48427
• CVE-2024-51030