CVE-2024-24494 Information

Description

Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day exercise pray read_book vitamins laundry alcohol and meat parameters in the add-tracker.php and update-tracker.php components.

Reference

https://github.com/0xQRx/VunerabilityResearch/blob/master/2024/DailyHabitTracker-Stored_XSS.md