CVE-2024-10348

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=tenants of the component Manage Tenant Details. The manipulation of the argument Last Name/First Name/Middle Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only shows the field "Last Name" to be affected. Other fields might be affected as well.

• CWE-79

• https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/house-rental-management-system.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.281697Permissions Required
• https://vuldb.com/?id.281697Third Party Advisory
• https://vuldb.com/?submit.427471Third Party Advisory
• https://www.sourcecodester.com/Product

Published

Oct 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10341The League of Legends Shortcodes plugin for WordPress is vul…6.5
• CVE-2024-10342The League of Legends Shortcodes plugin for WordPress is vul…5.4
• CVE-2024-10343The Beek Widget Extention plugin for WordPress is vulnerable…6.4
• CVE-2024-10344In Helix Core versions prior to 2024.2, an unauthenticated r…8.7
• CVE-2024-10345In Helix Core versions prior to 2024.2, an unauthenticated r…8.7
• CVE-2024-10347Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-10349A vulnerability was found in SourceCodester Best House Renta…9.8
• CVE-2024-1035A vulnerability has been found in openBI up to 1.0.8 and cla…9.8
• CVE-2024-10350A vulnerability was found in code-projects Hospital Manageme…9.8
• CVE-2024-10351A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It h…8.8
• CVE-2024-10352The Magical Addons For Elementor plugin for WordPress is vul…4.3
• CVE-2024-10353A vulnerability classified as critical has been found in Sou…7.2