CVE-2024-10840

LOW

Romadebrian Web-sekolah - XSS

Title source: rule

Description

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (3)

Scores

CVSS v3 2.4
EPSS 0.0017
EPSS Percentile 37.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-74 CWE-79 CWE-707
Status published

Affected Products (1)

romadebrian/web-sekolah

Timeline

Published Nov 05, 2024
Tracked Since Feb 18, 2026