Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-48284

Опубликовано: 14 нояб. 2024
Источник: nvd
CVSS3: 4.8
CVSS3: 5.4
EPSS Низкий

Описание

A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:phpgurukul:user_registration_\&_login_and_user_management_system:3.2:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00127
Низкий

4.8 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79

Связанные уязвимости

CVSS3: 5.4
github
около 1 года назад

A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.

EPSS

Процентиль: 32%
0.00127
Низкий

4.8 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79