CVE-2024-50837

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0

Description: A Stored Cross-Site Scripting (XSS) issue was discovered in the /admin/admin user.php endpoint, allowing remote attackers to execute arbitrary scripts via the firstname and username parameters.

Recommendations: For KASHIPARA E-learning Management System Project version 1.0, consider disabling access to the /admin/admin user.php endpoint until a patch is available, and restrict the use of the firstname and username parameters to minimize the risk of exploitation.