Medium · 6.1 CVE-2024-35583 EUVD-2024-35381

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web sc…

Published May 28, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.

References

https://portswigger.net/web-security/cross-site-scripting/stored
https://owasp.org/www-community/attacks/xss/
https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md