CVE-2024-0183

Katalog CVE

CVSS 4.8 · Medium EPSS 0,55%

Kerentanan Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) pada nia rrj nueva ecija engineer online portal. Skor CVSS 3.1 4.8 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/students.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249441 was assigned to this vulnerability.

Rincian

Terbit di NVD

1 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mega.nz/file/SB8ylCxQ#vSaXJwbNjeG-KXatgkxE8XI6Cmnv-A_Sg2IjvoJZs0E exploit · advisory pihak ketiga
• https://vuldb.com/?ctiid.249441 advisory pihak ketiga
• https://vuldb.com/?id.249441 advisory pihak ketiga