CVE-2024-35581

Description

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field.

References

https://portswigger.net/web-security/cross-site-scripting/stored

https://owasp.org/www-community/attacks/xss/

https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS