A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields.
No PoCs from references.
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/vighneshnair7/CVE-2024-51031