Cross-Site Scripting Vulnerability in PHPGurukul Land Record System
CVE-2024-13081
5.3MEDIUM
What is CVE-2024-13081?
A significant security vulnerability is identified in the PHPGurukul Land Record System version 1.0, specifically affecting the /admin/contactus.php file. This flaw enables cross-site scripting (XSS) through improper handling of the Page Description argument, allowing attackers to execute malicious scripts in the context of an affected user's session. Remote attackers can exploit this vulnerability to manipulate web content, potentially compromising user data, or impersonating legitimate users. The public disclosure of this vulnerability heightens the urgency for affected users to apply appropriate security measures.
Affected Version(s)
Land Record System 1.0