CVE-2024-33986

NVD Published Date: August 06, 2024 at 01:15 PM
NVD Last Modified: August 15, 2024 at 04:57 PM
Download Patch
Vulnerability ID
CVE-2024-33986
Severity
MEDIUM
Severity Score
6.1
Summary
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/department/index.php'.
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE ID
CWE-79

Recent Publish

CVE-2024-7522

CVE-2024-7528

CVE-2024-7460

CVE-2024-7459

CVE-2024-7462

CVE-2024-7461

See SecOps Solution
in action

Schedule Demo