Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument mark_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Eine problematische Schwachstelle wurde in SourceCodester Road Accident Map Marker 1.0 entdeckt. Dies betrifft einen unbekannten Teil der Datei /endpoint/add-mark.php. Mittels dem Manipulieren des Arguments mark_name mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.

Classification

CVE ID: CVE-2024-13021

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.3

Affected Products

Vendor: SourceCodester

Product: Road Accident Map Marker

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 17.83% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://vuldb.com/?id.289712
https://vuldb.com/?ctiid.289712
https://vuldb.com/?submit.469267
https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Road%20Accident%20Map%20Marker.md
https://www.sourcecodester.com/

Timeline