A Cross-site scripting (XSS) vulnerability in ‘user-profile.php’ in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the ‘fullname’ parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24194
Reference (s):
- http://sourcecodetester.com
- https://cxsecurity.com/issue/WLB-2020090030