Vulnerability · Published Aug 20, 2024 · Assigned by VulDB
CVE-2024-7945itsourcecode Laravel Property Management System Notes Page create cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Laravel Property Management System from itsourcecode. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Official description
A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/notes/create of the component Notes Page. The manipulation of the argument Note text leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| itsourcecode | Laravel Property Management System | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- VDB-275137 | itsourcecode Laravel Property Management System Notes Page create cross site scripting vdb-entry, technical-description
- VDB-275137 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #393373 | itsourcecode Laravel Property Management System 1.0 XSS third-party-advisory
- https://github.com/DeepMountains/zzz/blob/main/CVE2-3.md exploit