CVE-2024-48744

Name of the Vulnerable Software and Affected Versions PHPGurukul Teachers Record Management System version 2.1

Description A Reflected Cross Site Scripting (XSS) issue was found in the /trms/listed-teachers.php endpoint, allowing remote attackers to execute arbitrary code via the searchinput POST request parameter.

Recommendations For PHPGurukul Teachers Record Management System version 2.1, consider disabling the /trms/listed-teachers.php endpoint or restricting access to it until a patch is available. Avoid using the searchinput parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.