CVE-2024-27744

Name of the Vulnerable Software and Affected Versions Petrol Pump Management Software version 1.0

Description The issue allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the "profile.php" component. This is a Cross Site Scripting vulnerability.

Recommendations For Petrol Pump Management Software version 1.0, consider disabling the image parameter in the profile.php component until a patch is available. Restrict access to the profile.php component to minimize the risk of exploitation. Avoid using the image parameter in the affected component until the issue is resolved.