CVE-2024-33991

NVD Published Date: August 06, 2024 at 01:15 PM
NVD Last Modified: August 15, 2024 at 04:58 PM
Download Patch
Vulnerability ID
CVE-2024-33991
Severity
MEDIUM
Severity Score
6.1
Summary
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'.
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE ID
CWE-79

Recent Publish

CVE-2024-7531

CVE-2024-7524

CVE-2024-7530

CVE-2024-7525

CVE-2024-7520

CVE-2024-6358

See SecOps Solution
in action

Schedule Demo