CVE-2024-37800
Medium
|6.1No Exploit
Plain English Summary
AI-powered analysis for quick understanding
This vulnerability allows an attacker to inject malicious scripts into the restaurant reservation system, which can then execute in the browsers of users who visit the affected page. To exploit this, the attacker needs to craft a specially designed URL that includes the harmful script in the Date parameter, tricking users into clicking it.
Technical Description
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Date parameter at index.php.
CVSS Vector Analysis
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
Confidentiality ImpactLow
Integrity ImpactLow
Availability ImpactNone
ScopeChanged
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploit Resources
Search for proof-of-concept code and exploit modules
Official References
Est. Bounty
$862($500-$1K)
Vendor Response
Grade FPatched in 631 days
Quick Information
Published
Jun 18, 2024
almost 2 years ago
Last Modified
Mar 12, 2026
26 days ago
Vendor
code-projects
Product
restaurant reservation system