Cross-Site Scripting Vulnerability in PHPGurukul Land Record System 1.0
CVE-2024-13077
5.3MEDIUM
What is CVE-2024-13077?
A cross-site scripting (XSS) vulnerability exists in the PHPGurukul Land Record System 1.0, specifically within the /admin/add-property.php file. The flaw occurs due to improper handling of the 'Land Subtype' argument, allowing remote attackers to craft malicious input that can execute arbitrary JavaScript in the context of the user’s browser. This unauthorized execution can lead to session hijacking, data theft, and other malicious actions. As the exploit has been publicly disclosed, immediate attention and remediation are essential for users of affected versions.
Affected Version(s)
Land Record System 1.0