Vendors / SourceCodester Records 2063 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 414 CVSS 9.0–10.0
CVSS high 210 CVSS 7.0–8.9
Exploited now SourceCodester records in CISA KEV No SourceCodester vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00486 · Published 2024-05-13 · No fix listed CWE-79
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information paramete…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00472 · Published 2024-05-13 · No fix listed CWE-79
Priority MEDIUM 60
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00435 · Published 2024-05-02 · No fix listed CWE-79
Priority LOW 33
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.
CVSS 3.1 HIGH 7.4· Network · No auth · User interaction · EPSS 0.00657 · Published 2024-05-01 · No fix listed CWE-79
Priority LOW 25
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00399 · Published 2024-05-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical414 High210 Medium1435 Low4 No CVSS0