CVE-2024-7284

Name of the Vulnerable Software and Affected Versions SourceCodester Lot Reservation Management System version 1.0

Description A problematic issue was found in the system, affecting the file "/admin/ajax.php?action=save settings". The manipulation of the about argument leads to cross-site scripting. This issue can be initiated remotely.

Recommendations For SourceCodester Lot Reservation Management System version 1.0, consider disabling access to the "/admin/ajax.php?action=save settings" endpoint until a patch is available. Restrict the manipulation of the about argument to minimize the risk of cross-site scripting exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.