Cross Site Scripting Vulnerability in Online Marriage Registration System 1.0
CVE-2024-2773
Summary
An issue has been identified in the Campcodes Online Marriage Registration System 1.0 concerning cross-site scripting (XSS), stemming from improper handling of user-supplied input in the /user/search.php file. The vulnerability allows an attacker to execute arbitrary JavaScript code in the context of an affected user's browser, thus potentially compromising user data and sessions. Remote exploitation is possible, posing risks to web application security. This vulnerability has been made public, and relevant details can be found in the associated entries in vulnerability databases.
Affected Version(s)
Online Marriage Registration System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
CVSS V3.0
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved