CVE-2024-7929

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Simple Forum Website	1.0
sourcecodester	simple_forum_website	1.0

References

https://github.com/ulayaha/ulayaha.github.io/issues/2Exploit, Issue Tracking
https://vuldb.com/?ctiid.275115Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.275115Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?submit.392325Issue Tracking, Third Party Advisory, VDB Entry

Timeline

Published: Aug 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-79308.8A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affect CVE-2024-79318.8A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown pr CVE-2024-79325.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to exe CVE-2024-79339.8A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Affected is an unknown CVE-2024-79349.8A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been declared as critical. Affected by this vulnerab CVE-2024-79359.8A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is so CVE-2024-79369.8A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affects an unknown part of CVE-2024-79379.8A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown c CVE-2024-79385.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPER CVE-2024-79395.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute CVE-2024-79409.8The product exposes a service that is intended for local only to all network interfaces without any authentication.CVE-2024-79414.3An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the