CVE-2024-8605

CVE-2024-8605 is a medium-severity cross-site scripting (XSS) vulnerability affecting code-projects Inventory Management 1.0, specifically within the registration form's registration.php file. An authenticated attacker can exploit this by injecting malicious script into the input fields, leading to client-side script execution. The vulnerability has a CVSS score of 5.4, indicating a low attack complexity and requiring user interaction, with potential impacts on confidentiality and integrity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei, and it has garnered minimal community discussion or media coverage.