CVE-2024-4922

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Image Stack Website 1.0. This affects an unknown part. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264459.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Simple Image Stack Website	1.0

References

https://github.com/HuoMingZ/aoligei/blob/main/ceshi.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.264459Permissions Required, VDB Entry
https://vuldb.com/?id.264459Third Party Advisory, VDB Entry
https://vuldb.com/?submit.333760Third Party Advisory, VDB Entry
https://github.com/HuoMingZ/aoligei/blob/main/ceshi.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.264459Permissions Required, VDB Entry
https://vuldb.com/?id.264459Third Party Advisory, VDB Entry
https://vuldb.com/?submit.333760Third Party Advisory, VDB Entry

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-492206.1Cross-Site Request Forgery (CSRF) vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects CVE-2024-492216.1Cross-Site Request Forgery (CSRF) vulnerability in julian.weinert cSlider cslider allows Cross Site Request Forgery.This issue affects cSlid CVE-2024-492229.8Deserialization of Untrusted Data vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Object Injection.This issue affect CVE-2024-492236.1Cross-Site Request Forgery (CSRF) vulnerability in shibulijack CJ Change Howdy cj-change-howdy allows Cross Site Request Forgery.This issue CVE-2024-492246.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mahesh_9696 Mitm Bug Tracker mitm-bug-CVE-2024-492255.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in swebdeveloper wpPricing Builder wppric CVE-2024-492268.8Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Object Injection.This is CVE-2024-492279.8Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue CVE-2024-492285.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edwin Rivera bVerse Convert bverse-con CVE-2024-492296.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arifnezami Better Author Bio better-au CVE-2024-49238.8A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the fi CVE-2024-492306.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harry005 Ajax Custom CSS/JS ajax-aweso