CVE-2024-46300

MEDIUM

Placement Management System 1.0 - Stored Cross-Site Scripting via Registration Full Name Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-46300. PoCs published by riya98241.

Description

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.

Scores

CVSS v3 6.1
EPSS 0.0035
EPSS Percentile 26.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
angeljudesuarez/placement_management_system 1.0
Published Oct 07, 2024
Tracked Since Feb 18, 2026