CVE-2024-3090

Name of the Vulnerable Software and Affected Versions PHPGurukul Emergency Ambulance Hiring Portal version 1.0

Description A vulnerability was found in the processing of the file /admin/add-ambulance.php of the component Add Ambulance Page. The manipulation of the argument Ambulance Reg No/Driver Name leads to cross-site scripting. The attack may be initiated remotely.

Recommendations For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, as a temporary workaround, consider restricting access to the /admin/add-ambulance.php page until a patch is available. Avoid using the Ambulance Reg No/Driver Name argument in the affected page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.