CVE-2024-46470

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p29

Published

Sep 27, 2024 (Sep 27, 2024)

Modified

Jun 17, 2026

Description

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component.

Vendors: codeastro
Products: membership management system
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.