CVE Catalog
CVE-2020-24194
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.82%
53th percentile - higher than 53% of all known CVEs
Summary
A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter.
Risk Assessment
An attacker can steal user sessions, redirect users to malicious sites, or perform other actions in their context, compromising data confidentiality and integrity.
Recommendation
Immediately update the system to the latest version or apply input filtering and validation for the 'fullname' parameter.
Original NVD description (English source)
A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter.