CVE-2024-8141

Name of the Vulnerable Software and Affected Versions: SourceCodester Daily Calories Monitoring Tool version 1.0

Description: A vulnerability was found in the SourceCodester Daily Calories Monitoring Tool, affecting an unknown part of the file /endpoint/add-calorie.php. The manipulation of the arguments calorie date and calorie name leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations: For version 1.0, upgrade to version 1.1 to mitigate risks. As a temporary workaround, consider restricting access to the /endpoint/add-calorie.php endpoint until the update is applied. Avoid using the arguments calorie date and calorie name in the affected endpoint until the issue is resolved.