Description

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functionality on the Borrowers page.

INFO

Published Date :

2024-10-22T00:00:00.000Z

Last Modified :

2024-10-23T15:56:14.946Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-48415 vulnerability.

Vendors Products
Itsourcecode
  • Loan Management System
Razormist
  • Loan Management System
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-48415.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact