CVE-2024-33306: Sourcecodester Laboratory Management System

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.

Affected products

• Sourcecodester Laboratory Management System: version 1.0 only

Published 2024-05-01. Last modified 2026-06-17.