CVE-2024-7644

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leads_name/phone_number leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-79

• https://github.com/joinia/webray.com.cn/blob/main/Leads-Manager-Tool/leadmanagerxss.mdExploit
• https://vuldb.com/?ctiid.274065Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.274065Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.387345Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/

Published

Aug 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7638A vulnerability classified as critical has been found in Sou…9.8
• CVE-2024-7639A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-7640A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-7641A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-7642A vulnerability has been found in SourceCodester Kortex Lite…9.8
• CVE-2024-7643A vulnerability was found in SourceCodester Leads Manager To…9.8
• CVE-2024-7645A vulnerability was found in SourceCodester Clinics Patient …5.4
• CVE-2024-7646A security issue was discovered in ingress-nginx where an ac…8.8
• CVE-2024-7647The OTA Sync Booking Engine Widget plugin for WordPress is v…6.1
• CVE-2024-7648The Opal Membership plugin for WordPress is vulnerable to Se…4.3
• CVE-2024-7649The Opal Membership plugin for WordPress is vulnerable to St…6.1
• CVE-2024-7650Improper Control of Generation of Code ('Code Injection') vu…6.3