XSS Vulnerability in /jobportal/admin/login.php Exposes User Session Details

CVE-2024-8473

Summary

A Cross-Site Scripting (XSS) vulnerability has been identified in Job Portal Management Software, where input from users is not adequately encrypted. This security flaw allows an attacker to exploit the user_email parameter within the /jobportal/admin/login.php path. By doing so, they can potentially retrieve sensitive session details of authenticated users, posing a significant risk to user data integrity and confidentiality. It is essential for users of the affected software versions to implement appropriate security measures to protect against such exploitation.

References