Stored Cross Site Scripting Vulnerability in PHPGurukul Old Age Home Management System
CVE-2024-40481

5.4MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Old Age Home Management System
Vendor
CVE Published:
12 August 2024

Summary

A Stored Cross Site Scripting vulnerability exists in the PHPGurukul Old Age Home Management System version 1.0 that allows remote attackers to inject and execute arbitrary scripts through the 'message' parameter on the Contact Us page. This flaw can lead to unauthorized actions, data theft, and compromise user interactions on the web application, highlighting the need for immediate remediation and secure coding practices.

References

https://github.com/takekaramey/CVE_Writeup/blob/main/PHPG...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.