Vulnerability · Published Mar 1, 2024 · Assigned by VulDB
CVE-2024-2071SourceCodester FAQ Management System Update FAQ cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in FAQ Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Official description
A vulnerability, which was classified as problematic, has been found in SourceCodester FAQ Management System 1.0. Affected by this issue is some unknown functionality of the component Update FAQ. The manipulation of the argument Frequently Asked Question leads to cross site scripting. The attack may be launched remotely. VDB-255386 is the identifier assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | FAQ Management System | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- VDB-255386 | SourceCodester FAQ Management System Update FAQ cross site scripting vdb-entry, technical-description
- VDB-255386 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/faq-management-system.md related