CVE-2024-37800

Medium
|6.1
No Exploit

Plain English Summary

AI-powered analysis for quick understanding

This vulnerability allows an attacker to inject malicious scripts into the restaurant reservation system, which can then execute in the browsers of users who visit the affected page. To exploit this, the attacker needs to craft a specially designed URL that includes the harmful script in the Date parameter, tricking users into clicking it.

Technical Description

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Date parameter at index.php.

CVSS Vector Analysis

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
Confidentiality ImpactLow
Integrity ImpactLow
Availability ImpactNone
ScopeChanged

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploit Resources

Search for proof-of-concept code and exploit modules

Official References

Est. Bounty
$862($500-$1K)
Vendor Response
Grade FPatched in 631 days

Quick Information

Published

Jun 18, 2024

almost 2 years ago

Last Modified

Mar 12, 2026

26 days ago

Vendor

code-projects

Product

restaurant reservation system