CVE-2024-1010

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252279.

• CWE-79
• CWE-79

• https://github.com/jomskiller/Employee-Management-System---Stored-XSSExploit, Mitigation, Third Party Advisory
• https://github.com/jomskiller/Employee-Management-System---Stored-XSS/Exploit, Mitigation, Third Party Advisory
• https://vuldb.com/?ctiid.252279Permissions Required
• https://vuldb.com/?id.252279Third Party Advisory
• https://github.com/jomskiller/Employee-Management-System---Stored-XSSExploit, Mitigation, Third Party Advisory
• https://github.com/jomskiller/Employee-Management-System---Stored-XSS/Exploit, Mitigation, Third Party Advisory
• https://vuldb.com/?ctiid.252279Permissions Required
• https://vuldb.com/?id.252279Third Party Advisory

Published

Jan 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10094Pega Platform versions 6.x to Infinity 24.1.1 are affected b…9.8
• CVE-2024-10095In Progress Telerik UI for WPF versions prior to 2024 Q4 (20…9.8
• CVE-2024-10096Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-10097The Loginizer Security and Loginizer plugins for WordPress a…8.1
• CVE-2024-10098The ApplyOnline WordPress plugin before 2.6.3 does not prot…2.7
• CVE-2024-10099A stored cross-site scripting (XSS) vulnerability exists in …6.1
• CVE-2024-10100A path traversal vulnerability exists in binary-husky/gpt_ac…7.5
• CVE-2024-10101A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2024-10102The Photo Gallery, Images, Slider in Rbs Image Gallery WordP…2.7
• CVE-2024-10103In the process of testing the MailPoet WordPress plugin bef…6.1
• CVE-2024-10104The Jobs for WordPress plugin before 2.7.8 does not sanitise…5.9
• CVE-2024-10105The Job Postings WordPress plugin before 2.7.11 does not san…5.9