CVE-2024-7218

Katalog CVE

CVSS 6.1 · Medium EPSS 0,51%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada oretnom23 school log management system. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=save_student. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

Rincian

Terbit di NVD

30 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 42,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/topsky979/86480890cc621c240c86e95a3de9ecc4 exploit · advisory pihak ketiga
• https://vuldb.com/?id.272789 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.380425 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.272789 permissions required · vdb entry