PT-2024-34439
CVE-2024-50840
·
تاريخ النشر
2024-11-14
·
تاريخ التحديث
2024-11-15
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
KASHIPARA E-learning Management System Project version 1.0
Description:
A Stored Cross-Site Scripting (XSS) issue was found in the /admin/class.php file, allowing remote attackers to execute arbitrary scripts via the
class name parameter. This vulnerability enables code execution in the KASHIPARA E-learning System.Recommendations:
For KASHIPARA E-learning Management System Project version 1.0, consider disabling access to the /admin/class.php file or restricting the use of the
class name parameter until a patch is available. Avoid using the class name parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾