CVE-2024-50840

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0

Description: A Stored Cross-Site Scripting (XSS) issue was found in the /admin/class.php file, allowing remote attackers to execute arbitrary scripts via the class name parameter. This vulnerability enables code execution in the KASHIPARA E-learning System.

Recommendations: For KASHIPARA E-learning Management System Project version 1.0, consider disabling access to the /admin/class.php file or restricting the use of the class name parameter until a patch is available. Avoid using the class name parameter in the affected API endpoint until the issue is resolved.