CVE-2024-33976

NVD Published Date: August 06, 2024 at 11:16 AM
NVD Last Modified: August 15, 2024 at 04:51 PM
Download Patch
Vulnerability ID
CVE-2024-33976
Severity
MEDIUM
Severity Score
6.1
Summary
Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' parameter in '/admin/user/index.php'.
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE ID
CWE-79

Recent Publish

CVE-2024-7246

CVE-2024-33977

CVE-2024-33978

CVE-2024-33959

CVE-2024-33957

CVE-2024-33966

See SecOps Solution
in action

Schedule Demo