Cross Site Scripting Vulnerability in Attendance Management Component

CVE-2024-1265

What is CVE-2024-1265?

A cross-site scripting vulnerability exists in the Attendance Management component of CodeAstro University Management System 1.0. The issue arises from inadequate input validation in the '/att_add.php' file, where manipulation of the 'Student Name' argument can lead to the execution of malicious scripts in the context of the user's browser. This vulnerability allows attackers to execute arbitrary JavaScript code remotely, potentially compromising user data and security. Publicly disclosed exploits may pose a significant risk to institutions using this management system.

References