Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050 | Exploit Third Party Advisory |
| https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050 | Exploit Third Party Advisory |
Configurations
History
23 Apr 2025, 14:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:remyandrade:workout_journal_app:1.0:*:*:*:*:*:*:* | |
| First Time |
Remyandrade workout Journal App
Remyandrade |
|
| References | () https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050 - Exploit, Third Party Advisory |
20 Mar 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-20 22:15
Updated : 2025-04-23 14:34
NVD link : CVE-2024-24050
Mitre link : CVE-2024-24050
JSON object : View
Products Affected
remyandrade
- workout_journal_app
CWE
No CWE.