Cross-Site Scripting Vulnerability in PHPGurukul Land Record System
CVE-2024-13082
5.3MEDIUM
What is CVE-2024-13082?
A transaction flaw exists in the PHPGurukul Land Record System 1.0 related to the processing of the /admin/search-property.php file. The vulnerability arises from improper handling of the 'Search By' input parameter, which can be exploited to perform cross-site scripting (XSS) attacks. This potentially allows attackers to execute arbitrary scripts in the context of the user’s browser. The vulnerability has been disclosed publicly, raising concerns for users and system administrators regarding remote exploitation risks.
Affected Version(s)
Land Record System 1.0