CVE-2024-37798 in Beauty Parlour Management System

Sumário

de MITRE • 18/06/2024

Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input field.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 10/06/2024
• Divulgação: 18/06/2024
• Moderação: aceite
• Entrada: VDB-268845
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00349
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-37798
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-37798
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-37798/