CVE-2024-40069

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0

Description The issue is related to Stored Cross Site Scripting (XSS) via the endpoint "id generator/classes/Users.php?f=save". The vulnerability is specifically in the POST parameters firstname and lastname.

Recommendations For Sourcecodester Online ID Generator System version 1.0, consider validating and sanitizing the firstname and lastname parameters in the "id generator/classes/Users.php?f=save" endpoint to prevent XSS attacks. As a temporary workaround, restrict access to this endpoint until a proper fix is implemented.