CVE-2024-8366 | code-projects Pharmacy Management System 1.0 Update My Profile Page index.php fname/lname/email cross site scripting

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument fname/lname/email with the input <script>alert(1)</script> leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2024-8366. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.