CVE-2024-1269 – SourceCodester Product Management System supplier.php cross site scripting

https://notcve.org/view.php?id=CVE-2024-1269

A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/sajaljat/CVE-2024-1269 https://github.com/PrecursorYork/Product-Management-System-Using-PHP-and-MySQL-Reflected-XSS-POC/blob/main/README.md https://vuldb.com/?ctiid.253012 https://vuldb.com/?id.253012 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •