PT-2024-31683
CVE-2024-45528
·
تاريخ النشر
2024-09-02
·
تاريخ التحديث
2025-03-31
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
CodeAstro MembershipM-PHP (aka Membership Management System in PHP) version 1.0
Description:
The issue allows for stored XSS in the
fullname parameter of the "add members.php" page. This can lead to malicious script execution when the stored data is viewed.Recommendations:
For CodeAstro MembershipM-PHP (aka Membership Management System in PHP) version 1.0, consider validating and sanitizing user input for the
fullname parameter in the "add members.php" page to prevent XSS attacks. As a temporary workaround, restrict access to the "add members.php" page until a proper fix is applied.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾