CVE-2024-1215

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetch_data.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252782 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/PrecursorYork/crud-without-refresh-reload-Reflected_XSS-POC/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.252782Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252782Third Party Advisory
• https://github.com/PrecursorYork/crud-without-refresh-reload-Reflected_XSS-POC/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.252782Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252782Third Party Advisory

Published

Feb 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12143Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-12144Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-12146Improper Neutralization of Special Elements used in an SQL C…7.5
• CVE-2024-12147A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. …7.1
• CVE-2024-12148Incorrect authorization in permission validation component i…4.3
• CVE-2024-12149Incorrect permission assignment in temporary access requests…8.1
• CVE-2024-12150Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-12151Incorrect permission assignment in the user migration featur…5
• CVE-2024-12152The MIPL WC Multisite Sync plugin for WordPress is vulnerabl…7.5
• CVE-2024-12153The GDY Modular Content plugin for WordPress is vulnerable t…6.1
• CVE-2024-12154Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-12155The SV100 Companion plugin for WordPress is vulnerable to un…9.8