CVE-2024-8563

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0

Description: A vulnerability was found in the software, classified as problematic. It affects the file /endpoint/update.php, where the manipulation of the first name, middle name, and last name arguments leads to cross-site scripting. The attack can be initiated remotely.

Recommendations: For version 1.0, consider disabling the update functionality in the /endpoint/update.php file until a patch is available. Restrict access to the first name, middle name, and last name arguments in the affected endpoint to minimize the risk of exploitation.