CVE-2023-7059

Name of the Vulnerable Software and Affected Versions SourceCodester School Visitor Log e-Book version 1.0

Description A problem was found in the file log-book.php, where the manipulation of the Full Name argument leads to cross-site scripting. The attack can be launched remotely.

Recommendations For version 1.0, consider restricting the input for the Full Name argument in the log-book.php file to prevent cross-site scripting attacks. As a temporary workaround, consider validating and sanitizing user input for the Full Name field until a more permanent fix is available.