CVE-2024-5370

MEDIUM

Kashipara College Management System submit_enroll_staff.php cross site scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-5370 has a selected CVSS score of 5.3 (medium).

Description

A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 28, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

College Management System

Browse Kashipara / College Management System
CVE List1.0affected

college_management_system

Browse college_management_system_project / college_management_system

Default status: unknown

CVE List1.0affected

References

4
VDB-266282 | Kashipara College Management System submit_enroll_staff.php cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.266282