CVE-2024-2553

A vulnerability, which was classified as problematic, was found in SourceCodester Product Review Rating System 1.0. Affected is an unknown function of the component Rate Product Handler. The manipulation of the argument Your Name/Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257052.

• CWE-79

• https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/CVE-2024-2553%20-%20Product%20Rating%20System%20-%20Cross-Site-Scripting.mdExploit, Third Party Advisory
• https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/Product%20Rating%20System%20-%20Cross-Site-Scripting-1.mdBroken Link
• https://vuldb.com/?ctiid.257052Permissions Required, VDB Entry
• https://vuldb.com/?id.257052Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.298886Third Party Advisory, VDB Entry
• https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/CVE-2024-2553%20-%20Product%20Rating%20System%20-%20Cross-Site-Scripting.mdExploit, Third Party Advisory
• https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/Product%20Rating%20System%20-%20Cross-Site-Scripting-1.mdBroken Link
• https://vuldb.com/?ctiid.257052Permissions Required, VDB Entry
• https://vuldb.com/?id.257052Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.298886Third Party Advisory, VDB Entry

Published

Mar 17, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25524RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.4
• CVE-2024-25525RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.8
• CVE-2024-25526RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…8.1
• CVE-2024-25527RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.4
• CVE-2024-25528RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…5.9
• CVE-2024-25529RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.8
• CVE-2024-25530RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.8
• CVE-2024-25531RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.8
• CVE-2024-25532RuvarOA v6.01 and v12.01 were discovered to contain a SQL in…9.8
• CVE-2024-25533Error messages in RuvarOA v6.01 and v12.01 were discovered t…9.4
• CVE-2024-2554A vulnerability has been found in SourceCodester Employee Ta…8.8
• CVE-2024-25545An issue in Weave Weave Desktop v.7.78.10 allows a local att…7.8