CVE-2024-35581 Information

Description

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field.

Reference

https://portswigger.net/web-security/cross-site-scripting/stored https://owasp.org/www-community/attacks/xss/ https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md