Cross-Site Scripting (XSS) Vulnerability in AMSS++ version 4.31

CVE-2024-2595

What is CVE-2024-2595?

A vulnerability exists in AMSS++ version 4.31 due to inadequate encoding of user-controlled input, specifically within the 'b_id' parameter of the script located at /amssplus/modules/book/main/bookdetail_khet_person.php. This weakness enables remote attackers to craft malicious URLs targeting authenticated users, potentially allowing unauthorized access to sensitive session cookie credentials. Exploitation of this vulnerability could lead to significant security risks for users, as attackers may hijack user sessions and exploit the compromised data for malicious purposes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References