Cross Site Scripting Vulnerability in PHPGurukul User Registration System
CVE-2020-24723

4.8MEDIUM

What is CVE-2020-24723?

A Cross Site Scripting (XSS) vulnerability exists in the registration page of the admin panel of the PHPGurukul User Registration & Login and User Management System version 2.1. This security flaw allows attackers to inject malicious scripts into web pages viewed by other users, potentially compromising user data and session information. It is essential for administrators to ensure they are running the latest version of the software and implement appropriate mitigative measures to prevent exploitation of this vulnerability.

References

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.